Data Privacy Trainee

Keka Technologies; Chennai; On-site; INR 420,000 - 660,000; Full time

Job summary

Keka Technologies in Chennai seeks an Associate Consultant / Trainee to support Data Privacy, Data Protection, Cyber Law and GRC engagements. Freshers with 0-2 years in law, cyber law or information security are encouraged to apply.

You will assist with privacy assessments, regulatory research and compliance documentation under guidance of senior consultants. The role emphasizes learning DPDP/GDPR compliance, data flow mapping and the implementation of basic cybersecurity controls within client

Qualifications

• Fresher with 0-2 years in Data Privacy, Cyber Law, or IT GRC.
• Background in Law, Cyber Law, Cybersecurity or Information Security is preferred.
• Internships or projects in Data Privacy or compliance are advantageous.

Responsibilities

• Support privacy and protection assessments, including gap assessments.
• Assist with PIA, DPIA, RoPA and Data Flow Mapping activities.
• Review privacy policies, notices, consent, retention and data subject rights.
• Research DPDP Act, GDPR, PDPA and other requirements.
• Help map legal requirements to privacy/cybersecurity controls.
• Assist in preparing assessment reports, checklists, trackers and presentations.

Skills

Data Privacy

Cyber Law

Regulatory Research

Data Protection

Education

Integrated B.Tech + LLB

Bachelor's degree in Law

Tools

OneTrust

BigID

TrustArc

ISO 27001

Job description

Job Summary

The Associate Consultant / Trainee will support the delivery of Data Privacy, Data Protection, Cyber Law, Cybersecurity and GRC engagements. This role is suitable for freshers and candidates with 0 - 2 years of experience who have an academic or professional background in Law, Cyber Law, Cybersecurity or Information Security. The candidate will work with experienced consultants to support privacy assessments, regulatory research, risk assessments, documentation and compliance activities. Knowledge of Cyber Law and Cybersecurity will be an added advantage.

Key Responsibilities

• Support Data Privacy and Data Protection assessments, including Privacy Gap Assessments, against applicable laws and regulations.
• Assist with PIA, DPIA, RoPA and Data Flow Mapping activities.
• Support review of privacy policies, procedures, privacy notices, consent, data retention and data subject rights.
• Research applicable regulations including DPDP Act, GDPR, PDPA and other relevant requirements.
• Support the team in understanding Cyber Law, Cybersecurity and Information Security requirements and emerging cyber risks.
• Assist in mapping legal and regulatory requirements to applicable privacy and cybersecurity controls.
• Support review of basic cybersecurity controls relating to access management, data security, encryption, vulnerability and incident management.
• Support privacy and compliance assessments, including collection and review of client information, documents and audit evidence.
• Support consultants in client engagements, meetings and information-gathering sessions.
• Assist in preparing assessment reports, compliance checklists, trackers, presentations and other supporting documentation.

Qualifications

• Integrated B.Tech + LLB, Bachelor s degree in Law, Cyber Law, Cybersecurity, Information Security, Computer Science, IT or a related field.
• Candidates with a combination of Law and Cybersecurity / Information Security background will be an advantage.
• Relevant internships, academic projects or training in Data Privacy, Cyber Law, Cybersecurity, IT GRC or Compliance will be preferred.

Work Experience

• Freshers and candidates with 0-2 years of experience in Data Privacy, Cybersecurity, Cyber Law, IT GRC, IT Audit, Risk or Compliance.
• Good understanding of data privacy principles and regulatory requirements.
• Ability to read and understand laws, regulations and regulatory guidelines.
• Basic understanding of Cyber Law, Cybersecurity and Information Security concepts.
• Understanding of the relationship between legal requirements, privacy obligations and cybersecurity controls.
• Good research, analytical and problem-solving abilities.
• Good written and verbal communication skills.
• Ability to prepare clear documentation and reports.
• Willingness to learn and develop expertise in Data Privacy, Cybersecurity and GRC.
• Cyber Law and Cybersecurity knowledge will be an added advantage.
• Exposure to DPDP Act, GDPR, PCI DSS, ISO 27001 or ISO 27701 will be preferred.
• Attention to detail and ability to work with documentation and assessment evidence.
• Ability to manage assigned tasks and complete deliverables within timelines.
• Industry Certification will be an be plus: DCPP, CIPP, AIGP, ISO 27001, Security+, CEH, CCNA or other relevant certifications will be an advantage.
• Tools Exposure: Exposure to Data Privacy or GRC tools such as OneTrust, BigID, TrustArc or similar platforms will be an advantage.

Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.