Data Privacy Analyst

Persistent Systems; Mumbai; Hybrid; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Hybrid work

Flexible hours

Long Service awards

Mediclaim hospitalization

Group term life insurance

Education sponsorship

Job summary

Persistent Systems is seeking a Data Privacy Analyst to join the EDATO/DPO Office in Mumbai. The role focuses on data privacy regulations, privacy risk assessments, and DPIAs for new initiatives and vendor engagements, ensuring DPDP Act 2023, GDPR principles, and internal privacy policies are met.

The ideal candidate has 8–12 years of experience in Data Privacy, Privacy Compliance, or related fields, with expertise in third‑party privacy due diligence, and a collaborative approach across

Qualifications

• 8–12 years of experience in data privacy, privacy compliance, risk assessment, or privacy consulting.
• Proven experience conducting end-to-end Data Protection Impact Assessments (DPIAs).
• Strong understanding of DPDP Act, 2023 and GDPR principles.
• Experience in third‑party privacy due diligence and vendor risk assessments.

Responsibilities

• Conduct DPIAs and privacy risk assessments for new products, initiatives, technology implementations, and data processing activities.
• Perform privacy due diligence assessments for third‑party vendors, partners, and service providers.
• Evaluate privacy risks in business processes and recommend mitigations.
• Review data processing arrangements and identify privacy gaps with legal/compliance teams.
• Track findings, remediation plans, and risk treatment activities.

Skills

DPIA execution

Privacy risk assessment

DPDP Act knowledge

Vendor due diligence

Regulatory compliance

Job description

We are seeking a skilled Data Privacy Analyst to join our Data Privacy team within the EDATO/DPO Office. The ideal candidate will have strong expertise in data privacy regulations, privacy risk assessments, and third-party privacy due diligence. This role will focus on conducting Data Protection Impact Assessments (DPIAs), evaluating privacy risks associated with new business initiatives and vendor engagements, and supporting compliance with the DPDP Act, 2023, GDPR principles, and organizational privacy requirements.

• Role: Data Privacy Analyst
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology implementations, and data processing activities.
• Perform privacy due diligence assessments for third-party vendors, partners, and service providers.
• Evaluate privacy risks associated with business processes and recommend appropriate mitigation measures.
• Review data processing arrangements and support legal and compliance teams in identifying privacy-related contractual gaps.
• Assess compliance against DPDP Act requirements, GDPR principles, and internal privacy policies.
• Track assessment findings, remediation plans, risk treatment activities, and closure status.
• Maintain and enhance privacy assessment registers, risk repositories, and documentation.
• Collaborate with business, technology, security, legal, and compliance teams to drive privacy-by-design practices.
• Prepare privacy assessment reports, executive summaries, and governance updates for stakeholders.
• Support privacy governance forums by providing assessment metrics, status reports, and compliance insights.
• Assist in the development and enhancement of privacy assessment methodologies, templates, and frameworks.
• Contribute to awareness initiatives related to privacy regulations and risk management practices.

Expertise You'll Bring:

• 8 to 12 years of experience in Data Privacy, Privacy Compliance, Risk Assessment, or Privacy Consulting roles.
• Practical experience conducting end-to-end Data Protection Impact Assessments (DPIAs).
• Strong understanding of the Digital Personal Data Protection (DPDP) Act, 2023 and GDPR principles.
• Experience performing third-party privacy due diligence and vendor risk assessments.
• Ability to identify, analyze, document, and mitigate privacy risks across business and technology initiatives.
• Experience collaborating with business, legal, technology, information security, and compliance stakeholders.
• Strong written communication skills suitable for governance reporting, audits, and regulatory reviews.
• Ability to translate technical and operational processes into privacy and compliance risk assessments.
• Strong documentation, analytical, and problem-solving capabilities.
• Experience maintaining risk registers, assessment records, and remediation tracking mechanisms.
• Knowledge of privacy governance frameworks, data lifecycle management, and privacy-by-design principles.
• Ability to manage multiple assessments and priorities in a fast-paced environment.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."