Data Privacy Specialist

SQ1 Security Technology Private Limited; Chennai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

SQ1 Security Technology Private Limited is seeking a Privacy Specialist to strengthen its data protection program in India, with strong DPDP Act knowledge. The role focuses on privacy compliance, data handling practices, risk assessments, and coordinating with business and technical teams.

Responsibilities include DPDP compliance governance, data lifecycle management, privacy risk assessments, incident handling, and stakeholder communications.

Qualifications

• 3–5 years of experience in data privacy, privacy compliance, information security GRC, legal compliance, or a related role.
• Strong knowledge of India’s DPDP Act and applicable rules, including key obligations relating to notice, consent where applicable, data principal rights, safeguards, breach response, and accountability.
• Experience with privacy documentation, data mapping, risk assessments, compliance reviews, and coordination with cross-functional stakeholders.

Responsibilities

• Maintain privacy program in alignment with DPDP Act and applicable rules and guidance.
• Translate privacy obligations into practical policies, procedures, workflows, and controls for relevant business functions.
• Support privacy governance activities, maintain compliance registers, and track implementation of privacy requirements.
• Monitor changes in privacy laws, rules, and regulatory guidance and assess their potential impact on organizational practices.

Skills

DPDP Act knowledge

Privacy governance

Data protection

Risk assessments

Stakeholder coordination

Education

Bachelor's degree in Law / IT or related field

Job description

SQ1 Security Technology Private Limited | Full time

The Privacy Specialist is responsible for supporting andstrengthening the organization’s privacy and personal data protection program,with strong working knowledge of India’s Digital Personal Data Protection(DPDP) Act and applicable rules. The role focuses on privacy compliance, datahandling practices, risk assessments, documentation, individual rightsrequests, and coordination with business and technical teams. Experience withthe EU General Data Protection Regulation (GDPR) is an added advantage.

Key Responsibilities

DPDP Compliance & Privacy Governance

• Maintainand support the organization’s privacy program in alignment with India’sDPDP Act and applicable rules and guidance
  
• Translateprivacy obligations into practical policies, procedures, workflows, andcontrols for relevant business functions
  
• Supportprivacy governance activities, maintain compliance registers, and trackimplementation of privacy requirements
  
• Monitorchanges in privacy laws, rules, and regulatory guidance and assess theirpotential impact on organizational practices
  

Personal Data Lifecycle & Data Principal Rights

• Supportdata mapping and records of personal data processing, includingcollection, use, sharing, retention, and deletion
  
• Helpestablish and maintain processes for handling data principal requests,grievances, consent withdrawal, and related communications, as applicable
  
• Reviewprivacy notices, consent language, and data collection forms to helpensure transparency and appropriate purpose limitation
  
• Coordinatewith business and technical teams to support retention schedules, deletionprocesses, and appropriate handling of personal data
  

Privacy Risk Assessments & Incident Management

• Conductor coordinate privacy impact and risk assessments for new projects,products, vendors, and changes to personal data processing
  
• Identifyprivacy risks and recommend proportionate controls and remediation actionsin collaboration with relevant teams
  
• Supportthe identification, assessment, escalation, and documentation of personaldata breaches and privacy incidents
  
• Coordinatewith Security, Legal, IT, and business stakeholders on incident response,required assessments, and applicable notification obligations
  

Third-Party Privacy & GDPR (Added Advantage)

• Reviewvendor and partner privacy practices, contractual clauses, anddata-processing arrangements with relevant stakeholders
  
• Supportprivacy due diligence and track remediation of issues identified duringvendor reviews or assessments
  
• Whereapplicable, assist with GDPR-related activities such as data subjectrights, lawful bases, records of processing, and cross-border transferreviews
  
• Helpmap privacy requirements across jurisdictions and identify common controlswhile accounting for jurisdiction-specific obligations
  

Documentation, Training & Stakeholder Management

• Maintainprivacy policies, procedures, notices, assessment records, processingregisters, and evidence of compliance
  
• Prepareprivacy compliance updates, risk summaries, metrics, and reports formanagement and internal stakeholders
  
• Deliveror coordinate privacy awareness sessions and provide practical guidance toteams handling personal data
  

Required Skills & Experience

• 3–5years of experience in data privacy, privacy compliance, informationsecurity GRC, legal compliance, or a related role
  
• Strong,demonstrable knowledge of India’s DPDP Act and applicable rules, includingkey obligations relating to notice, consent where applicable, dataprincipal rights, safeguards, breach response, and accountability
  
• Experiencewith privacy documentation, data mapping, risk assessments, compliancereviews, and coordination with cross-functional stakeholders
  

Preferred Qualifications

• Bachelor’sdegree in Law, Information Technology, Cybersecurity, Business, or arelated field; relevant privacy or data protection experience may also beconsidered
  
• Workingexperience with DPDP, GDPR is an added advantage; certifications ortraining such as CIPP/A, CIPP/E, CIPM, or other relevant privacyqualifications are desirable
  
• Experiencemanaging security incidents and crisis situations
  
• Strongleadership, communication, and decision-making skills
  

Preferred Qualifications

• Bachelor’sdegree in IT, Cybersecurity, or related field
  

Certifications such as ( Certified InformationSystems Security Professional (CISSP) - Certified Information PrivacyProfessional (CIPP) - Certified Data Privacy Solutions Engineer (CDPSE ), CDPOor ISO/IEC 27701.