Data Privacy Consultant

Persistent; Mumbai; Hybrid; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Competitive salary package

Talent development with funding for up

Cutting-edge technologies

Employee engagement initiatives and (L

Annual health check-ups

Group term life and Mediclaim

Job summary

Persistent is seeking a Data Privacy Consultant in Mumbai with 3–5 years of experience to support the DPO Office. You will conduct DPIAs, evaluate privacy risks, and ensure compliance with DPDP Act 2023 and other privacy regulations while collaborating with Legal, Procurement, and Security teams.

You will maintain privacy records, prepare dashboards, and support governance initiatives across the organization. Strong communication and documentation skills are essential.

Qualifications

• 3–5 years in Data Privacy, Data Protection or Regulatory Compliance.
• Experience in DPIAs/PIAs from initiation to completion.
• Strong knowledge of DPDP Act 2023 and GDPR principles.

Responsibilities

• Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Evaluate privacy risks and recommend mitigation measures for regulatory compliance.
• Perform third-party and vendor privacy assessments including processors and sub-processors.
• Assess data processing activities for DPDP Act 2023 compliance and internal policies.
• Review privacy clauses in contracts and coordinate remediation with Legal, Procurement, and Information Security.
• Track privacy findings and remediation actions with documentation.

Skills

Data privacy

Risk assessment

Regulatory compliance

Stakeholder management

Documentation

Communication

Education

CIPP/E

CIPM

DCPP

ISO/IEC 27701 Lead Auditor

ISO/IEC 27701 Lead Implementer

Job description

About Position:

We are seeking a Data Privacy Consultant with 3-5 years of experience in data privacy, risk assessment, and regulatory compliance to support the Data Privacy function within the DPO Office. The role will focus on conducting Data Protection Impact Assessments (DPIAs), evaluating privacy risks, performing third-party privacy due diligence, and ensuring compliance with data protection regulations and organizational privacy standards. The ideal candidate will collaborate with business, technology, legal, procurement, and security teams to strengthen privacy governance and risk management practices across the organization.

• Role: Data Privacy Consultant
• Location: Mumbai
• Experience: 3 to 5 Years
• Job Type: Full-Time Employment

What You'll Do:

• Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology changes, and data processing activities.
• Evaluate privacy risks and recommend appropriate mitigation measures to ensure regulatory compliance and data protection best practices.
• Perform third-party and vendor privacy assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
• Assess data processing activities for compliance with the DPDP Act 2023, applicable privacy regulations, internal policies, and contractual obligations.
• Review privacy and data protection clauses within contracts and coordinate remediation activities with Legal, Procurement, and Information Security teams.
• Track privacy findings, risks, and remediation actions through closure and maintain supporting documentation.
• Maintain accurate records of privacy assessments, risk evaluations, and compliance evidence.
• Prepare privacy risk dashboards, management reports, and governance updates for the DPO Office and relevant committees.
• Support privacy governance initiatives, audits, regulatory reviews, and control assessments.
• Collaborate with cross-functional stakeholders to embed privacy requirements into business processes and technology implementations.
• Provide guidance and awareness on privacy obligations, risk controls, and data protection practices.

Expertise You'll Bring:

• 3 to 5 years of experience in Data Privacy, Data Protection, Privacy Risk Management, or Regulatory Compliance.
• Hands-on experience conducting Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) from initiation through completion.
• Strong knowledge of the Digital Personal Data Protection (DPDP) Act 2023, associated rules, and privacy compliance requirements.
• Good understanding of GDPR principles, privacy-by-design concepts, lawful processing requirements, and privacy risk management practices.
• Experience conducting third-party privacy assessments, vendor due diligence, and privacy compliance reviews.
• Knowledge of privacy governance frameworks, control monitoring, and compliance assessment methodologies.
• Familiarity with ISO/IEC 27701, privacy information management systems, and privacy risk management principles.
• Experience reviewing privacy requirements within contracts, agreements, and vendor engagements.
• Ability to identify privacy risks and develop practical remediation recommendations.
• Strong stakeholder management skills with experience working closely with Business, Technology, Legal, Procurement, Information Security, and Compliance teams.
• Excellent documentation, reporting, risk assessment, and analytical capabilities.
• Strong communication and presentation skills with the ability to influence stakeholders across multiple functions.
• Professional certifications such as CIPP/E, CIPM, DCPP, ISO/IEC 27701 Lead Auditor, or ISO/IEC 27701 Lead Implementer will be an added advantage.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent-persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."