Career Change Program - Senior Data Protection Apprentice

Tsaaro; Bengaluru; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Tsaaro is seeking an Associate Director Privacy & GRC in Mumbai to lead and mature client privacy, governance, and cybersecurity programs. You will drive high-impact privacy initiatives, coordinate with CISO, DPO, CTO, and Legal teams, and shape governance frameworks at scale.

Ideal candidates bring 7+ years in privacy/GRC, strong regulatory knowledge, and experience delivering enterprise programs and audits. The role demands strategic leadership and client-focused advisory mastery.

Qualifications

• 7+ years of hands-on privacy, data protection, cybersecurity, or GRC consulting experience.
• Strong understanding of GDPR, CCPA/CPRA, DPDP Act, PDPL, and global frameworks.
• Solid grasp of ISO 27001, ISO 27701, NIST CSF, SOC 2, and related CONTROLS.
• Experience leading enterprise privacy programs, ISMS/PIMS implementations, and audits.
• Certifications such as CIPP/E, CIPM, CIPT are preferred.

Responsibilities

• Lead and oversee privacy, GRC, and data protection programs tailored to client needs.
• Assess clients' privacy, governance, and security controls, identifying gaps and roadmaps.
• Manage advanced privacy assessments including DPIAs, PIAs, RoPA, and audits.
• Provide advisory on GDPR, CCPA/CPRA, DPDP Act, PDPL, and other regulations.
• Develop and review privacy policies, governance frameworks, and compliance docs.
• Support ISO 27001, ISO 27701, NIST CSF, and SOC 2 implementation and reviews.
• Support incident response planning, breach readiness, and Data Subject Rights programs.
• Conduct third-party risk assessments and audit readiness initiatives.
• Collaborate with CISO, DPO, CTO, Legal, Compliance to deliver privacy & GRC solutions.
• Lead cybersecurity-aligned GRC activities including policy creation and governance.

Skills

Privacy

GRC

Cybersecurity

Leadership

Stakeholder mgmt

Education

CIPP/E

CIPM

CIPT

ISO27001 LA/LI

Tools

Securiti.ai

OneTrust

BigID

Job description

Job Summary

Associate Director Privacy & GRC - Mumbai, Maharashtra, India. Full-time role. Join Tsaaro as an Associate Director Privacy & GRC. Lead with Expertise. Drive Transformation. Shape Global Privacy & Governance. Are you a seasoned privacy, security, and governance professional looking to elevate your leadership journey and take on high-impact responsibilities? At Tsaaro, we don just deliver compliance we redefine how organizations implement privacy, information security, and governance frameworks at scale. Were growing rapidly and are looking for an Associate Director Privacy & GRC who thrives in dynamic environments, understands complex regulatory ecosystems, and has a proven track record of managing and executing large-scale privacy and governance programs for clients. Your Role: Associate Director Privacy & GRC.

Responsibilities

• Lead and oversee privacy, GRC, and data protection programs tailored to client needs.


• Assess clients privacy, governance, and security controls, identifying gaps and contributing to transformation roadmaps.


• Manage advanced privacy assessments including gap assessments, DPIAs, PIAs, RoPA, internal audits, and risk assessments.


• Provide advisory on GDPR, CCPA, DPDP Act, PDPL, and other global regulations.


• Develop and review privacy policies, governance frameworks, and compliance documentation.


• Contribute to the implementation of ISO 27001, ISO 27701, NIST, SOC 2, and related frameworks.


• Support incident response planning, breach readiness, and Data Subject Rights programs.


• Conduct and review third-party risk assessments and audit readiness initiatives.


• Work with senior client stakeholders (CISO, DPO, CTO, Legal, Compliance) to deliver effective privacy and GRC solutions.


• Lead cybersecurity-aligned GRC activities including policy creation, internal audit programs, and governance structure.

Requirements

• 7+ years of hands-on experience in privacy, data protection, cybersecurity, or GRC consulting.


• Strong understanding of international privacy laws including GDPR, CCPA/CPRA, DPDP Act, PDPL, and global frameworks.


• Solid grasp of ISO 27001, ISO 27701, NIST CSF, SOC 2, and other governance/control frameworks.


• Experience managing enterprise-level privacy programs, GRC initiatives, ISMS/PIMS implementations, and audits.


• Familiarity with privacy and GRC tools (e.g., Securiti.ai, OneTrust, BigID).


• Certifications such as CIPP/E, CIPM, CIPT, ISO 27001 LA/LI (preferred).


• Excellent communication skills, leadership capability, and strong stakeholder management.


• A mindset that is strategic, solution-oriented, collaborative, and impact-driven.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.