Data Privacy Trainee

Sisainfosec; Chennai District; On-site; INR 600,000 - 900,000; Full time

Job summary

Sisainfosec is seeking an Associate Consultant / Trainee to assist in delivering Data Privacy, Data Protection, Cyber Law, Cybersecurity and GRC engagements in Chennai. The role welcomes freshers with 0–2 years of related background in Law, Cyber Law, Cybersecurity or Information Security.

You will work with experienced consultants on privacy assessments, regulatory research, risk assessments, documentation and compliance tasks, with opportunities to grow expertise in DPDP Act and global

Qualifications

• Integrated degree combination (B.Tech + LLB) or equivalent in Law/Cyber/InfoSec
• Background in Law, Cyber Law, Cybersecurity or Information Security preferred
• 0–2 years in Data Privacy, Cybersecurity, Cyber Law, IT GRC, IT Audit, Risk or Compliance

Responsibilities

• Support Data Privacy and Data Protection assessments against applicable laws/regulations
• Assist with PIA, DPIA, RoPA and Data Flow Mapping
• Review privacy policies, notices, consent, data retention and data subject rights
• Research DPDP Act, GDPR, PDPA and related requirements
• Map legal/regulatory requirements to privacy and cybersecurity controls
• Assist in basic cybersecurity controls reviews (access management, data security, encryption, vulnerability, incident management)
• Support in collecting client information, documents and audit evidence for assessments
• Assist consultants in client engagements, meetings and information-gathering sessions
• Prepare assessment reports, compliance checklists and trackers

Skills

Data Privacy

Data Protection

Cyber Law

Cybersecurity

Information Security

GRC

Education

Integrated B.Tech + LLB

Bachelor’s degree in Law / Cyber Law / Cybersecurity / Information Security / CS / IT

Internships or projects in Data Privacy / Cyber Law / IT GRC

Tools

OneTrust

BigID

TrustArc

Job description

The Associate Consultant / Trainee will support the delivery of Data Privacy, Data Protection, Cyber Law, Cybersecurity and GRC engagements. This role is suitable for freshers and candidates with 0 – 2 years of experience who have an academic or professional background in Law, Cyber Law, Cybersecurity or Information Security. The candidate will work with experienced consultants to support privacy assessments, regulatory research, risk assessments, documentation and compliance activities. Knowledge of Cyber Law and Cybersecurity will be an added advantage.

Key Responsibilities:

• Support Data Privacy and Data Protection assessments, including Privacy Gap Assessments, against applicable laws and regulations.
• Assist with PIA, DPIA, RoPA and Data Flow Mapping activities.
• Support review of privacy policies, procedures, privacy notices, consent, data retention and data subject rights.
• Research applicable regulations including DPDP Act, GDPR, PDPA and other relevant requirements.
• Support the team in understanding Cyber Law, Cybersecurity and Information Security requirements and emerging cyber risks.
• Assist in mapping legal and regulatory requirements to applicable privacy and cybersecurity controls.
• Support review of basic cybersecurity controls relating to access management, data security, encryption, vulnerability and incident management.
• Support privacy and compliance assessments, including collection and review of client information, documents and audit evidence.
• Support consultants in client engagements, meetings and information-gathering sessions.
• Assist in preparing assessment reports, compliance checklists, trackers, presentations and other supporting documentation.

Qualifications:

• Integrated B.Tech + LLB, Bachelor’s degree in Law, Cyber Law, Cybersecurity, Information Security, Computer Science, IT or a related field.
• Candidates with a combination of Law and Cybersecurity / Information Security background will be an advantage.
• Relevant internships, academic projects or training in Data Privacy, Cyber Law, Cybersecurity, IT GRC or Compliance will be preferred.

Work Experience:

• Freshers and candidates with 0–2 years of experience in Data Privacy, Cybersecurity, Cyber Law, IT GRC, IT Audit, Risk or Compliance.
• Good understanding of data privacy principles and regulatory requirements.
• Ability to read and understand laws, regulations and regulatory guidelines.
• Basic understanding of Cyber Law, Cybersecurity and Information Security concepts.
• Understanding of the relationship between legal requirements, privacy obligations and cybersecurity controls.
• Good research, analytical and problem-solving abilities.
• Good written and verbal communication skills.
• Ability to prepare clear documentation and reports.
• Willingness to learn and develop expertise in Data Privacy, Cybersecurity and GRC.
• Cyber Law and Cybersecurity knowledge will be an added advantage.
• Exposure to DPDP Act, GDPR, PCI DSS, ISO 27001 or ISO 27701 will be preferred.
• Attention to detail and ability to work with documentation and assessment evidence.
• Ability to manage assigned tasks and complete deliverables within timelines.
• Industry Certification will be an be plus: DCPP, CIPP, AIGP, ISO 27001, Security+, CEH, CCNA or other relevant certifications will be an advantage.
• Tools Exposure: Exposure to Data Privacy or GRC tools such as OneTrust, BigID, TrustArc or similar platforms will be an advantage.