Data Privacy consultant

Keka Technologies; Bengaluru; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

Keka Technologies is seeking a seasoned Data Privacy Lead to design, implement, and govern comprehensive privacy programs for client engagements. The role involves mapping data flows, conducting PIAs/DPIAs, and developing RoPA to document processing activities.

You will manage privacy policies, stay aligned with GDPR/PDPA, and lead a small team while guiding clients on strategy and controls. This position requires 8–9 years of privacy experience and strong communication skills.

Qualifications

• Total experience 8–9 years, including 4–5 years in data privacy consulting
• Strong client-facing background and privacy project delivery
• Solid understanding of data privacy principles, frameworks, and regulatory requirements
• Familiarity with Information Security, Data Security and Risk & Compliance in privacy context
• Ability to read and interpret data protection laws and regulations
• Experience conducting PIAs and DPIAs and RoPA management
• Excellent analytical and communication skills, cross-team collaboration
• Industry thought leadership – papers, blogs, speakership, etc.

Responsibilities

• Design and develop data privacy frameworks aligned with regulatory requirements
• Assess privacy maturity and set roadmaps for client privacy programs
• Policy management: develop and manage privacy policies and procedures
• Data flow mapping to document personal data movement
• Conduct PIAs and DPIAs to identify risks and mitigation
• Develop RoPA to document processing activities
• Ensure compliance with GDPR, PDPA, and other standards
• Research regulatory updates and recommend improvements for privacy processes

Skills

Client interaction

Team management

Regulatory knowledge

PIA DPIA

RoPA management

Data privacy frameworks

Data flow mapping

Regulatory compliance

Education

Bachelor’s degree in law or CS or InfoSec

Tools

OneTrust

BigID

TrustArc

Job description

Data Privacy Domain:

• Design and develop robust data privacy frameworks aligned with regulatory requirements.
• Gap and Privacy Maturity Level Assessment and setting roadmap for privacy journey for clients
• Policy Management: Develop, implement, and manage data privacy policies and procedures.
• Data Flow Mapping: Understand the process flow of personal data within organizational systems, create detailed data flow maps.
• Privacy Impact Assessments (PIA) and DPIA: Conduct PIAs and DPIAs to identify privacy risks and recommend mitigating controls.
• Records of Processing Activities (RoPA): Develop, implement, and manage RoPA to document data processing activities.
• Regulatory Compliance: Stay updated on domestic and global privacy laws, regulations, and standards (e.g., GDPR, PDPA) and ensure organizational compliance.
• Research and Recommendations: Research regulatory updates and recommend improvements for data privacy and protection processes.

Team Management:

Experience in managing the small team, allocating and tracking tasks and their activities and completing deliverables in time and quality.

Client Interaction

Work in a client-facing role, providing guidance and support on data privacy and Data Security.

Education

Bachelor s degree in law, Computer Science, Information Security, or related field.

Work Experience

• Total experience of 8-9 years, including 4-5 years of relevant data privacy experience, with a strong background in client-facing roles
• Good hands-on experience Privacy Consulting assignments and client management
• Strong understanding of data privacy principles, frameworks, and regulatory requirements.
• Familiarity with the role of Information Security, Data Security and Data Privacy in the Risk and Compliance domain.
• Ability to read and interpret Data Protection Laws and regulations.
• Experience conducting Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• RoPA Management: Familiarity with managing Records of Processing Activities (RoPA).
• Analytical Abilities: Excellent analytical and problem-solving abilities to address privacy-related challenges.
• Communication: Effective communication and interpersonal skills to collaborate across teams and communicate complex concepts effectively. To interpret regulatory updates and industry best practices.
• Industry Though Leadership - Paper publication, Blogs, Speakership etc.
• Industry Certification - DCPP, DCPLA, CIPP, CIPT, CIPM, AiGP, ISO 27701:2019 (PIMS)
• Tools Exposure: Exposure to Data Privacy Management Tools like One Trust, BigID, Trust Arc etc.