Associate

The Glove; Thiruvananthapuram; On-site; INR 900,000 - 1,500,000; Full time

Job summary

The Glove Company seeks a Data Privacy & Compliance professional in India to lead privacy initiatives focused on DPDP Act and GDPR, DPIA, and HIPAA where applicable.

You will partner with cybersecurity teams to review data flows, third-party relationships, and privacy controls, while maintaining RO P A/ROPA records and supporting audits and remediation efforts.

Strong knowledge of privacy risk management and global regulations is essential; experience in regulated industries is preferred.

Qualifications

• Strong understanding of Data Privacy and Privacy Compliance.
• Hands-on experience with DPDP Act, GDPR, and privacy risk management.
• Experience in DPIA / PIA and Privacy Risk Assessments.
• Knowledge of ROPA / Records of Processing Activities.
• Understanding HIPAA privacy requirements.

Responsibilities

• Manage and support Data Privacy and DPDP Act compliance initiatives.
• Conduct DPIA and Privacy Risk Assessments.
• Support GDPR and other global data privacy regulations.
• Develop, maintain, and review RO PA?
• Provide Privacy Risk Assessments and remediation support?
• Identify privacy risks related to data collection, processing, storage, sharing, and retention.
• Partner with Cybersecurity and Information Security teams to assess privacy and security risks.
• Review data flows, processing activities, third-party relationships, and privacy controls.
• Support implementation and monitoring of privacy policies, procedures, standards, and controls.
• Assist with privacy assessments for new products, applications, processes, and vendors.
• Maintain privacy documentation, assessment records, risk registers, and compliance evidence.
• Support privacy audits, regulatory assessments, and remediation activities.
• Work with stakeholders to track and close identified privacy and compliance gaps.
• Leverage privacy management tools such as OneTrust and BigID.

Skills

Data Privacy

Privacy Compliance

DPDP Act

GDPR

DPIA / PIA

Privacy Risk Assessments

ROPA

HIPAA privacy

Education

Bachelor's/Master's degree relevant field

Job description

About the Role

We are looking for aData Privacy & Compliance professionalwith strong experience in privacy regulations, risk assessments, and data protection frameworks. The candidate will be responsible for supporting and managing privacy compliance initiatives across the organization, with a strong focus onDPDP, GDPR, DPIA, ROPA, HIPAA, and privacy risk management.

Key Responsibilities

• Manage and supportData Privacy and DPDP Act complianceinitiatives.
• ConductData Protection Impact Assessments (DPIA)andPrivacy Risk Assessments.
• Support compliance withGDPRand other applicable global data privacy regulations.
• Develop, maintain, and reviewRecords of Processing Activities (ROPA).
• SupportHIPAA privacy and data protection requirementswhere applicable.
• Identify privacy risks related to data collection, processing, storage, sharing, and retention.
• Partner withCybersecurity and Information Security teamsto assess privacy and security risks.
• Review data flows, processing activities, third-party relationships, and privacy controls.
• Support implementation and monitoring ofprivacy policies, procedures, standards, and controls.
• Assist with privacy assessments for new products, applications, processes, and vendors.
• Maintain privacy documentation, assessment records, risk registers, and compliance evidence.
• Support privacy audits, regulatory assessments, and remediation activities.
• Work with stakeholders to track and close identified privacy and compliance gaps.
• Leverage privacy management and data discovery tools such asOneTrust and BigID.

Required Skills

• Strong understanding ofData Privacy, Data Protection, and Privacy Compliance.
• Hands-on experience withDPDP Act, GDPR, and privacy risk management.
• Experience inDPIA / PIAandPrivacy Risk Assessments.
• Strong knowledge ofROPA / Records of Processing Activities.
• Understanding ofHIPAAprivacy requirements.

Preferred Qualifications

• Bachelor's/Master's degree inInformation Security, Cybersecurity, Law, IT, Risk Management, or a related field.
• Experience in privacy compliance withinIT, BFSI, healthcare, consulting, technology, or other regulated industries.