Data Privacy & Data Protection Specialist

Soffit Infrastructure Services; Gurugram District; On-site; INR 800,000 - 1,400,000; Full time

Job summary

Soffit Infrastructure Services is seeking a Data Privacy & Data Protection Specialist with 2+ years of relevant experience in privacy compliance. You will support DPIAs, DPA reviews, data mapping, RoPA, and ISO 27701 implementations, coordinating with Legal, IT, and HR.

The role requires hands-on privacy expertise, strong analytical and stakeholder-management skills, and a proactive approach to monitoring regulatory changes and ensuring compliance across the organization.

Qualifications

• 2+ years of hands-on experience in Data Privacy / Data Protection / Privacy Compliance.
• Good understanding of GDPR and DPDP Act.
• Practical knowledge of DPIA, DPA, RoPA, Data Mapping, and Privacy Risk Assessments.
• Knowledge of ISO 27701 and Privacy Information Management Systems (PIMS).
• Understanding of personal data, sensitive personal data, data processing, data retention, and data lifecycle management.
• Experience in privacy compliance documentation and audit support.

Responsibilities

• Support and implement data privacy and data protection policies, processes, and compliance requirements.
• Ensure compliance with privacy regulations, including GDPR and the DPDP Act.
• Conduct and support DPIA and privacy risk assessments.
• Assist with DPAs, data privacy assessments, and third-party privacy reviews.
• Support Data Mapping and Data Flow Analysis to identify how personal data is collected, processed, stored, and shared.
• Assist in maintaining RoPA and other privacy documentation.
• Support implementation and compliance activities related to ISO 27701 and privacy management frameworks.
• Monitor changes in privacy regulations and assess their impact on organizational processes.
• Work with internal stakeholders to identify privacy risks and recommend controls and mitigations.
• Support privacy audits, compliance reviews, and preparation of reports and documentation.
• Assist in handling data subject rights requests, privacy queries, and related compliance activities.
• Coordinate with Legal, Information Security, IT, HR, and business teams on data privacy requirements.

Skills

Data Privacy / Data Protection / Priv

GDPR

DPDP Act

DPIA

DPA

RoPA

Data Mapping

Privacy Risk Assessments

ISO 27701

PIMS

Privacy Documentation

Audit Support

Stakeholder Management

Job description

Job Summary

We are looking for a Data Privacy & Data Protection Specialist with 2+ years of relevant experience in data privacy, data protection, and regulatory compliance. The ideal candidate should have hands-on knowledge of privacy regulations, privacy assessments, data protection frameworks, and compliance activities.

Key Responsibilities

• Support and implement data privacy and data protection policies, processes, and compliance requirements.
• Ensure compliance with applicable privacy regulations, including GDPR and the Digital Personal Data Protection (DPDP) Act.
• Conduct and support Data Protection Impact Assessments (DPIA) and privacy risk assessments.
• Assist with Data Processing Agreements (DPA), data privacy assessments, and third-party privacy reviews.
• Support Data Mapping and Data Flow Analysis to identify how personal and sensitive data is collected, processed, stored, and shared.
• Assist in maintaining Records of Processing Activities (RoPA) and other privacy documentation.
• Support implementation and compliance activities related to ISO 27701 and privacy management frameworks.
• Monitor changes in privacy regulations and assess their impact on organizational processes.
• Work with internal stakeholders to identify privacy risks and recommend appropriate controls and mitigation measures.
• Support privacy audits, compliance reviews, and preparation of reports and documentation.
• Assist in handling data subject rights requests, privacy queries, and related compliance activities.
• Coordinate with Legal, Information Security, IT, HR, and business teams on data privacy requirements.

Required Skills

• 2+ years of hands-on experience in Data Privacy / Data Protection / Privacy Compliance.
• Good understanding of GDPR and DPDP Act.
• Practical knowledge of DPIA, DPA, RoPA, Data Mapping, and Privacy Risk Assessments.
• Knowledge of ISO 27701 and Privacy Information Management Systems (PIMS).
• Understanding of personal data, sensitive personal data, data processing, data retention, and data lifecycle management.
• Experience in privacy compliance documentation and audit support.
• Strong analytical, documentation, communication, and stakeholder-management skills.

Preferred Qualifications

• Certifications such as CIPP/E, CIPM, CIPT, ISO 27701, or equivalent will be an advantage.
• Experience working with enterprise privacy programs or information security teams.
• Knowledge of additional privacy regulations such as CCPA/CPRA will be an added advantage.

Candidate Profile

The ideal candidate should be someone who has practical exposure to privacy and data protection activities, rather than only theoretical knowledge. Candidates with experience in GDPR, DPDP, DPIA/DPA, ISO 27701, data mapping, privacy assessments, and compliance will be preferred.

Disclaimer

This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.