Data Privacy & Data Protection Specialist

Soffit Infrastructure Services (P) Ltd; Gurugram District; On-site; INR 600,000 - 900,000; Full time

Job summary

Soffit Infrastructure Services (P) Ltd in India is seeking a Data Privacy & Data Protection Specialist with 2+ years of hands-on experience in privacy, data protection, and regulatory compliance. You will work on privacy assessments, DPIAs, DPDP and GDPR compliance, and help implement privacy controls across the organization.

The role involves mapping data flows, maintaining RoPA, assisting with DPIA/DPA reviews, and supporting audits and data subject requests.

Qualifications

• 2+ years of hands-on experience in Data Privacy / Data Protection / Privacy Compliance.
• Strong knowledge of GDPR and DPDP Act.
• Experience with DPIA, DPA, RoPA, Data Mapping, and Privacy Risk Assessments.
• Familiarity with ISO 27701 and Privacy Information Management Systems (PIMS).
• Understanding of personal data lifecycle and privacy documentation.

Responsibilities

• Support and implement data privacy and data protection policies, processes, and compliance requirements.
• Ensure compliance with applicable privacy regulations, including GDPR and the DPDP Act.
• Conduct and support DPIA and privacy risk assessments.
• Assist with DPA, data privacy assessments, and third-party privacy reviews.
• Support Data Mapping and Data Flow Analysis to identify how personal and sensitive data is collected, processed, stored, and shared.
• Assist in maintaining RoPA and other privacy documentation.
• Support ISO 27701 and privacy management framework implementation and compliance.
• Monitor changes in privacy regulations and assess their impact on processes.
• Work with internal stakeholders to identify privacy risks and recommend controls.
• Support privacy audits, compliance reviews, and documentation preparation.
• Assist in handling data subject rights requests and related compliance activities.
• Coordinate with Legal, Information Security, IT, HR, and business teams on privacy requirements.

Skills

Privacy regulations

DPIA

DPA

RoPA

Data mapping

DPDP Act

ISO 27701

Stakeholder management

Documentation

Job description

Job Summary

We are looking for a Data Privacy & Data Protection Specialist with 2+ years of relevant experience in data privacy, data protection, and regulatory compliance. The ideal candidate should have hands‑on knowledge of privacy regulations, privacy assessments, data protection frameworks, and compliance activities.

Key Responsibilities

• Support and implement data privacy and data protection policies, processes, and compliance requirements.
• Ensure compliance with applicable privacy regulations, including GDPR and the Digital Personal Data Protection (DPDP) Act.
• Conduct and support Data Protection Impact Assessments (DPIA) and privacy risk assessments.
• Assist with Data Processing Agreements (DPA), data privacy assessments, and third‑party privacy reviews.
• Support Data Mapping and Data Flow Analysis to identify how personal and sensitive data is collected, processed, stored, and shared.
• Assist in maintaining Records of Processing Activities (RoPA) and other privacy documentation.
• Support implementation and compliance activities related to ISO 27701 and privacy management frameworks.
• Monitor changes in privacy regulations and assess their impact on organizational processes.
• Work with internal stakeholders to identify privacy risks and recommend appropriate controls and mitigation measures.
• Support privacy audits, compliance reviews, and preparation of reports and documentation.
• Assist in handling data subject rights requests, privacy queries, and related compliance activities.
• Coordinate with Legal, Information Security, IT, HR, and business teams on data privacy requirements.

Required Skills

• 2+ years of hands‑on experience in Data Privacy / Data Protection / Privacy Compliance.
• Good understanding of GDPR and DPDP Act.
• Practical knowledge of DPIA, DPA, RoPA, Data Mapping, and Privacy Risk Assessments.
• Knowledge of ISO 27701 and Privacy Information Management Systems (PIMS).
• Understanding of personal data, sensitive personal data, data processing, data retention, and data lifecycle management.
• Experience in privacy compliance documentation and audit support.
• Strong analytical, documentation, communication, and stakeholder‑management skills.

Preferred Qualifications

• Certifications such as CIPP/E, CIPM, CIPT, ISO 27701, or equivalent will be an advantage.
• Experience working with enterprise privacy programs or information security teams.
• Knowledge of additional privacy regulations such as CCPA/CPRA will be an added advantage.

Candidate Profile

The ideal candidate should be someone who has practical exposure to privacy and data protection activities, rather than only theoretical knowledge. Candidates with experience in GDPR, DPDP, DPIA/DPA, ISO 27701, data mapping, privacy assessments, and compliance will be preferred.