Data Privacy Analyst

Persistent Systems; Maharashtra; On-site; INR 2,800,000 - 4,400,000; Full time

Job summary

Persistent Systems is seeking a Data Privacy Analyst in Mumbai to join the Data Privacy team within the EDATO/DPO Office. The role requires 8–12 years of experience in data privacy, with strong DPIA and vendor due diligence skills and deep DPDP Act, GDPR knowledge.

You will drive privacy assessments, governance reporting, and risk mitigation across business initiatives, collaborating with legal, security, and Compliance teams to ensure privacy-by-design practices.

Qualifications

• 8–12 years experience in Data Privacy, Privacy Compliance, Risk Assessment or Privacy Consulting.
• Experience conducting end-to-end Data Protection Impact Assessments (DPIAs).
• Strong knowledge of DPDP Act, 2023 and GDPR principles.
• Experience performing third‑party privacy due diligence and vendor risk assessments.
• Ability to identify, document and mitigate privacy risks across initiatives.
• Excellent written communication for governance reporting and audits.

Responsibilities

• Conduct DPIAs and privacy risk assessments for new products and initiatives.
• Perform privacy due diligence for third-party vendors and service providers.
• Evaluate privacy risks and recommend mitigation measures.
• Review data processing agreements and identify privacy gaps.
• Assess compliance with DPDP Act, GDPR and internal policies.
• Track findings, remediation, and closure status.
• Maintain privacy assessment registers and risk repositories.
• Collaborate across business, tech, security, legal and compliance teams.
• Prepare governance reports and executive summaries.
• Support privacy governance forums with metrics and insights.
• Assist in developing privacy assessment methodologies and templates.
• Contribute to awareness initiatives on privacy regulations.

Skills

DPIA execution

privacy risk assessments

GDPR knowledge

DPDP Act knowledge

vendor due diligence

privacy governance

stakeholder collaboration

privacy reporting

Job description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries.

About Position

We are seeking a skilled Data Privacy Analyst to join our Data Privacy team within the EDATO/DPO Office. The ideal candidate will have strong expertise in data privacy regulations, privacy risk assessments, and third-party privacy due diligence. This role will focus on conducting Data Protection Impact Assessments (DPIAs), evaluating privacy risks associated with new business initiatives and vendor engagements, and supporting compliance with the DPDP Act, 2023, GDPR principles, and organizational privacy requirements.

• Role: Data Privacy Analyst
• Location: Mumbai
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do

• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology implementations, and data processing activities.
• Perform privacy due diligence assessments for third-party vendors, partners, and service providers.
• Evaluate privacy risks associated with business processes and recommend appropriate mitigation measures.
• Review data processing arrangements and support legal and compliance teams in identifying privacy-related contractual gaps.
• Assess compliance against DPDP Act requirements, GDPR principles, and internal privacy policies.
• Track assessment findings, remediation plans, risk treatment activities, and closure status.
• Maintain and enhance privacy assessment registers, risk repositories, and documentation.
• Collaborate with business, technology, security, legal, and compliance teams to drive privacy-by-design practices.
• Prepare privacy assessment reports, executive summaries, and governance updates for stakeholders.
• Support privacy governance forums by providing assessment metrics, status reports, and compliance insights.
• Assist in the development and enhancement of privacy assessment methodologies, templates, and frameworks.
• Contribute to awareness initiatives related to privacy regulations and risk management practices.

Expertise You'll Bring

• 8–12 years of experience in Data Privacy, Privacy Compliance, Risk Assessment, or Privacy Consulting roles.
• Practical experience conducting end-to-end Data Protection Impact Assessments (DPIAs).
• Strong understanding of the Digital Personal Data Protection (DPDP) Act, 2023 and GDPR principles.
• Experience performing third-party privacy due diligence and vendor risk assessments.
• Ability to identify, analyze, document, and mitigate privacy risks across business and technology initiatives.
• Experience collaborating with business, legal, technology, information security, and compliance stakeholders.Strong written communication skills suitable for governance reporting, audits, and regulatory reviews.
• Ability to translate…