Data Privacy Professional

r3 Consultant; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading consulting firm in Gurugram is seeking a skilled Data Privacy Professional. The ideal candidate will have 7–10 years of experience, specializing in data processing agreements and global data regulations such as GDPR. This role involves contractual negotiations, implementing privacy frameworks, and conducting privacy impact assessments. Strong communication and scholarly legal background are essential. Candidates must hold relevant certifications and demonstrate exemplary project management skills.

Qualifications

• 7–10 years of relevant experience in data privacy, focusing on DPA and SCC reviews.
• Strong working knowledge of GDPR and global privacy frameworks.
• Mandatory certifications: CIPP/E, CIPM, or CIPT.

Responsibilities

• Review, draft, and negotiate Data Processing Agreements and Standard Contractual Clauses.
• Lead implementation of GDPR-compliant processes.
• Conduct Data Protection Impact Assessments for new systems.

Skills

Leadership in privacy projects

Contractual negotiation

Cross-functional collaboration

Regulatory compliance

Education

Bachelor’s or Master’s degree in Law

Tools

OneTrust

TrustArc

Job description

We are looking for a skilled and proactive Data Privacy Professional with 7–10 years of hands‑on experience in reviewing Data Processing Agreements (DPAs), EU/UK Standard Contractual Clauses (SCCs), and implementing global data protection regulations such as GDPR, ISO 27701, DPDPA, and CCPA. The ideal candidate should have a legal academic background with a sound understanding of technical and security controls, enabling a well‑rounded approach to data privacy compliance.

Job Title: Data Privacy Professional

Location: Gurugram

Experience: 10–12 Years

Key Responsibilities

• Contractual Review & Negotiation
• Review, draft, and negotiate DPAs, EU and UK SCCs.
• Identify and mitigate privacy risks in contracts in collaboration with internal teams.
• Regulatory Implementation
• Lead or support the implementation of GDPR‑compliant processes.
• Conduct gap analyses and align practices with GDPR, DPDPA, and other data protection laws.
• Legal Advisory
• Advise on data privacy regulations, especially cross‑border data transfers.
• Monitor global regulatory updates and assess their business impact.
• Technical & Security Collaboration
• Partner with IT/security teams to ensure technical and organizational safeguards.
• Recommend privacy‑enhancing technologies and best practices for secure data handling.
• Training & Awareness
• Develop and deliver training on data privacy laws and internal policies.
• Foster a strong culture of privacy and compliance across the organization.
• Privacy Impact Assessments
• Conduct Data Protection Impact Assessments (DPIAs) for new systems and projects.
• Identify risks and propose mitigation strategies.

Required Qualifications & Skills

• Bachelor’s or Master’s degree in Law.
• 7–10 years of relevant experience in data privacy, with a focus on DPA and SCC reviews.
• Strong working knowledge of GDPR and global privacy frameworks.
• Understanding of technical/security controls in a privacy context.
• Mandatory certifications: CIPP/E, CIPM, or CIPT.
• Strong communication, negotiation, and analytical skills.
• Experience in cross-functional collaboration.

Preferred Attributes

• Experience with privacy tools such as OneTrust or TrustArc.
• Familiarity with global privacy laws (e.g., PDPA, PIPL).
• Detail‑oriented with the ability to manage multiple projects simultaneously.