Data Privacy consultant

Sisainfosec; Bengaluru; On-site; INR 2,800,000 - 4,200,000; Full time

Job summary

Sisainfosec is seeking a senior data privacy professional with 8–9 years of experience, including 4–5 years in client-facing privacy work. The role involves designing privacy frameworks, conducting PIAs/DPIAs, and leading policy development and RoPA. Strong regulatory understanding and certifications are expected.

You will manage client engagements, map data flows, and ensure compliance with GDPR, PDPA, and related standards while guiding a small team and collaborating cross-functionally.

Qualifications

• 8–9 years total experience with 4–5 years data privacy in client-facing roles.
• Hands-on privacy consulting and client management experience.
• Strong understanding of data privacy principles, frameworks and regulatory requirements.
• Familiarity with the role of Information Security, Data Security and Data Privacy in the Risk & Compliance domain.
• Ability to read and interpret Data Protection Laws and regulations.
• Experience conducting Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• RoPA management familiarity.
• Analytical and problem-solving abilities.
• Excellent communication across teams and stakeholders.
• Industry thought leadership – papers, blogs, speakership, etc.

Responsibilities

• Design and develop robust data privacy frameworks aligned with regulatory requirements.
• Gap and Privacy Maturity Level Assessment and setting roadmap for privacy journey for clients
• Policy Management: Develop, implement, and manage data privacy policies and procedures.
• Data Flow Mapping: Understand the process flow of personal data within organizational systems, create detailed data flow maps.
• Privacy Impact Assessments (PIA) and DPIA: Conduct PIAs and DPIAs to identify privacy risks and recommend mitigating controls.
• Records of Processing Activities (RoPA): Develop, implement, and manage RoPA to document data processing activities.
• Regulatory Compliance: Stay updated on domestic and global privacy laws, regulations, and standards (e.g., GDPR, PDPA) and ensure organizational compliance.
• Research and Recommendations: Research regulatory updates and recommend improvements for data privacy and protection processes.
• Team Management: Experience in managing a small team, allocating and tracking tasks and their activities.
• Client Interaction: Work in a client-facing role, providing guidance and support on data privacy and Data Security.

Skills

Team management

Client interaction

Communication

Analytical thinking

Regulatory understanding

Education

Bachelor’s degree in law, Computer Science, Information Security, or related field

Tools

OneTrust

BigID

TrustArc

Job description

• Design and develop robust data privacy frameworks aligned with regulatory requirements.
• Gap and Privacy Maturity Level Assessment and setting roadmap for privacy journey for clients
• Policy Management: Develop, implement, and manage data privacy policies and procedures.
• Data Flow Mapping: Understand the process flow of personal data within organizational systems, create detailed data flow maps.
• Privacy Impact Assessments (PIA) and DPIA: Conduct PIAs and DPIAs to identify privacy risks and recommend mitigating controls.
• Records of Processing Activities (RoPA): Develop, implement, and manage RoPA to document data processing activities.
• Regulatory Compliance: Stay updated on domestic and global privacy laws, regulations, and standards (e.g., GDPR, PDPA) and ensure organizational compliance.
• Research and Recommendations: Research regulatory updates and recommend improvements for data privacy and protection processes.

Team Management

Experience in managing the small team, allocating and tracking tasks and their activities and completing deliverables in time and quality.

Client Interaction

Work in a client-facing role, providing guidance and support on data privacy and Data Security.

Education

Bachelor’s degree in law, Computer Science, Information Security, or related field.

Work Experience

• Total experience of 8–9 years, including 4–5 years of relevant data privacy experience, with a strong background in client-facing roles
• Good hands-on experience Privacy Consulting assignments and client management
• Strong understanding of data privacy principles, frameworks, and regulatory requirements.
• Familiarity with the role of Information Security, Data Security and Data Privacy in the Risk and Compliance domain.
• Ability to read and interpret Data Protection Laws and regulations.
• Experience conducting Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• RoPA Management: Familiarity with managing Records of Processing Activities (RoPA).
• Analytical Abilities: Excellent analytical and problem-solving abilities to address privacy-related challenges.
• Communication: Effective communication and interpersonal skills to collaborate across teams and communicate complex concepts effectively. To interpret regulatory updates and industry best practices.
• Industry Though Leadership – Paper publication, Blogs, Speakership etc.
• Industry Certification – DCPP, DCPLA, CIPP, CIPT, CIPM, AiGP, ISO 27701:2019 (PIMS)
• Tools Exposure: Exposure to Data Privacy Management Tools like One Trust, BigID, Trust Arc etc.