Data Privacy Senior Manager

Protiviti India; Chennai District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Protiviti India seeks a Senior Data Privacy Consultant to build privacy frameworks and conduct PIA/DPIA assessments. You will map regulatory requirements for data controller and processor roles, create policies, and assess apps, vendors, and cloud services for compliance.

The role emphasizes remediation, incident support, and privacy training. 3+ years’ experience and preferred certifications are required; travel within India or abroad may be needed.

Qualifications

• 3+ years of experience.
• Prior experience in a professional consultancy firm is preferred.
• Certifications: CIPT, CIPM, CIPP, CDPSE, DPO, CISSP, CISM, CISA are preferred

Responsibilities

• Create privacy framework based on GDPR, IDPR, CCPA, ADHICS, and other requirements.
• Map regulatory requirements for data controller and data processor roles.
• Conduct Privacy Impact Assessments (PIA) and Data Privacy Impact Assessments (DPIA).
• Create and update security and privacy policies, procedures, and notices.
• Assess applications, vendors, infrastructure, and cloud services for compliance.
• Provide remediation recommendations including technical solutions.
• Support privacy incident management processes and mitigation actions.
• Prepare training materials and deliver training on privacy standards.
• Develop data classification guidelines and classify data accordingly.
• Understand business data lifecycle and create data flow maps.
• Implement data leakage prevention tools.
• Provide assurance on DLP and monitoring activities.
• Assist in inventorying sensitive information for various audiences.

Skills

Privacy

Regulatory mapping

PIA/DPIA

Policy development

Training delivery

Education

B.E/MBA/MCA/MCA or Equivalent

Job description

Roles and responsibilities:

• To create privacy framework based on compliance requirements like GDPR, IDPR, CCPA, ADHICS, CCPA, etc.
• To map regulatory requirements as per the requirements of data controller” and “data processor”
• To conduct Privacy Impact Assessment (PIA) and Data Privacy Impact Assessment (DPIA)
• To create and update security & privacy policies, procedures, good practices and notices.
• To assess applications, vendors, infrastructure, cloud services and processes for compliance as per security and privacy requirement
• To provide remediation recommendations including technical solutions regarding the gaps identified
• To provide support for privacy related incident management process, recommendations to incidents, to help in preparation of mitigation plan and to provide support in closing the incident.
• To prepare training material and provide training about maintaining required data privacy standards while collecting, storing, processing and destruction of data.
• To help with the development of data classification guidelines
• To create policies for data classification and classify data as per the data classification guidelines.
• To understand the business, to analyze the data life cycle and accordingly create data flow maps.
• To implement data leakage prevention tool based on defined business, security and regulatory requirements.
• To provide assurance regarding Data Loss Prevention and other monitoring tools, efforts and related investigations and remediation actions
• To assist in the process of identification and creation of inventory of sensitive information that is being stored, processed, or transmitted internally and to a variety of audiences, including customers, vendors, employees, etc.

Expected profile:

• B.E/MBA/MCA/MCA or Equivalent
• 3+ years of experience.
• Prior experience in a professional consultancy firm is preferred.
• Certifications: CIPT, CIPM, CIPP, CDPSE, DPO, CISSP, CISM, CISA are preferred

Skill set:

• Strong interpersonal skills, communication - written and verbal.
• Good project management and team management skills
• Strong analytical skills, Able to articulate and correlate.
• Sound Technical knowledge
• Willingness to travel within India or abroad.

Specific points for Senior Level positions:

• To manage a team size of 4 or more members
• To create project plan as per the agreed upon scope of work.
• To track the health of projects to ensure they are on track. To take necessary actions in case of any anticipated roadblocks or issues
• To guide the team members to help them progress as per the project plan and to help them work on their annual goals.
• Ability to effectively manage multiple, concurrent projects and meet deadlines while working both independently and in a team environment.
• Demonstrate integrity, values, principles, and work ethic and lead by example.