Data Privacy Consultant

Persistent Systems Limited; Mumbai; Hybrid; INR 1,500,000 - 2,500,000; Full time

Benefits offered by this job

Flexible work hours

Long Service awards

Group term life insurance

Mediclaim hospitalization

Job summary

Persistent Systems Limited is seeking a Data Privacy Consultant with 3–5 years of hands-on experience to support the DPO Office. You will lead DPIAs, privacy risk assessments, and third-party privacy reviews for DPDP Act 2023 compliance and privacy governance initiatives.

You will collaborate with Legal, Procurement, and Information Security teams to strengthen privacy controls, maintain records, and prepare governance updates for leadership committees.

Qualifications

• 3–5 years of hands-on data privacy and regulatory compliance experience.
• Experience in DPIAs/PIAs from initiation to completion.
• Strong knowledge of DPDP Act 2023 and GDPR principles.

Responsibilities

• Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology changes, and data processing activities.
• Evaluate privacy risks and propose mitigation for regulatory compliance and data protection best practices.
• Perform third-party and vendor privacy assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
• Assess data processing activities for compliance with the DPDP Act 2023, applicable privacy regulations, internal policies, and contractual obligations.
• Review privacy and data protection clauses within contracts and coordinate remediation activities with Legal, Procurement, and Information Security teams.
• Track privacy findings, risks, and remediation actions through closure and maintain supporting documentation.
• Maintain accurate records of privacy assessments, risk evaluations, and compliance evidence.
• Prepare privacy risk dashboards, management reports, and governance updates for the DPO Office and relevant committees.
• Support privacy governance initiatives, audits, regulatory reviews, and control assessments.
• Collaborate with cross-functional stakeholders to embed privacy requirements into business processes and technology implementations.
• Provide guidance and awareness on privacy obligations, risk controls, and data protection practices.

Skills

Data Privacy

DPIAs / PIAs

Privacy Risk Management

Regulatory Compliance

Stakeholder Management

Documentation & Reporting

Communication & Presentation

Education

Bachelor's degree in a relevant field

Privacy certifications (CIPP/E, CIPM, DCPP)

Tools

ISO/IEC 27701 knowledge

DPDP Act 2023 knowledge

Job description

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

We are seeking a Data Privacy Consultant with 3-5 years of experience in data privacy, risk assessment, and regulatory compliance to support the Data Privacy function within the DPO Office. The role will focus on conducting Data Protection Impact Assessments (DPIAs), evaluating privacy risks, performing third-party privacy due diligence, and ensuring compliance with data protection regulations and organizational privacy standards. The ideal candidate will collaborate with business, technology, legal, procurement, and security teams to strengthen privacy governance and risk management practices across the organization.

• Role: Data Privacy Consultant
• Experience: 3 to 5 Years
• Job Type: Full-Time Employment

What You'll Do:

• Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology changes, and data processing activities.
• Evaluate privacy risks and recommend appropriate mitigation measures to ensure regulatory compliance and data protection best practices.
• Perform third-party and vendor privacy assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
• Assess data processing activities for compliance with the DPDP Act 2023, applicable privacy regulations, internal policies, and contractual obligations.
• Review privacy and data protection clauses within contracts and coordinate remediation activities with Legal, Procurement, and Information Security teams.
• Track privacy findings, risks, and remediation actions through closure and maintain supporting documentation.
• Maintain accurate records of privacy assessments, risk evaluations, and compliance evidence.
• Prepare privacy risk dashboards, management reports, and governance updates for the DPO Office and relevant committees.
• Support privacy governance initiatives, audits, regulatory reviews, and control assessments.
• Collaborate with cross-functional stakeholders to embed privacy requirements into business processes and technology implementations.
• Provide guidance and awareness on privacy obligations, risk controls, and data protection practices.

Expertise You'll Bring:

• 3-5 years of experience in Data Privacy, Data Protection, Privacy Risk Management, or Regulatory Compliance.
• Hands-on experience conducting Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) from initiation through completion.
• Strong knowledge of the Digital Personal Data Protection (DPDP) Act 2023, associated rules, and privacy compliance requirements.
• Good understanding of GDPR principles, privacy-by-design concepts, lawful processing requirements, and privacy risk management practices.
• Experience conducting third-party privacy assessments, vendor due diligence, and privacy compliance reviews.
• Knowledge of privacy governance frameworks, control monitoring, and compliance assessment methodologies.
• Familiarity with ISO/IEC 27701, privacy information management systems, and privacy risk management principles.
• Experience reviewing privacy requirements within contracts, agreements, and vendor engagements.
• Ability to identify privacy risks and develop practical remediation recommendations.
• Strong stakeholder management skills with experience working closely with Business, Technology, Legal, Procurement, Information Security, and Compliance teams.
• Excellent documentation, reporting, risk assessment, and analytical capabilities.
• Strong communication and presentation skills with the ability to influence stakeholders across multiple functions.
• Professional certifications such as CIPP/E, CIPM, DCPP, ISO/IEC 27701 Lead Auditor, or ISO/IEC 27701 Lead Implementer will be an added advantage.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."