Data Protection Specialist

Evoke HR Solutions Pvt. Ltd.; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Evoke HR Solutions Pvt. Ltd. is seeking an experienced Associate Vice President - Data Protection to lead the organization’s privacy and protection framework in Mumbai.

The role collaborates with Legal, Compliance, Risk, IT and business teams to ensure alignment with regulatory requirements. The candidate should possess 10+ years in data privacy, strong knowledge of DPDPA, GDPR, CCPA, and related regulations, and hands-on experience with DPIAs, risk assessments, and data governance.

Qualifications

• 10+ years in Data Privacy, Data Protection, Compliance, or related field.
• Strong knowledge of DPDPA, GDPR, CCPA and related privacy regulations.
• Experience with DPIA, privacy risk assessment, incident response, and governance.
• CIPP, CIPM, or ISO 27701 certification is an advantage.

Responsibilities

• Ensure compliance with DPDPA, GDPR, CCPA and other applicable data protection regulations.
• Develop and implement privacy policies, procedures, and governance frameworks.
• Conduct Data Privacy Impact Assessments (DPIAs) and identify privacy risks.
• Support data privacy breach management, incident investigations, and regulatory reporting.
• Drive Data Governance initiatives, incl. ISO 27701 (PIMS) assessments and certification.
• Assess third-party vendors for data privacy compliance and support privacy clauses in contracts.
• Support Consent Management and handle Data Principal Access Requests (DPARs).
• Promote privacy awareness and support employee data protection training.

Skills

Data privacy

Regulatory knowledge

Stakeholder management

Analytical skills

Education

Bachelor's degree in Law / Information Security / Computer Science

Job description

Job Title : Associate Vice president : Data Protection - AVP

Experience: 10+ Years

Job Overview:

We are looking for an experienced Data Protection professional to manage and strengthen the organization’s data privacy and protection framework. The role will work closely with Legal, Compliance, Risk, IT, and business teams.

Key Responsibilities:

• Ensure compliance with DPDPA, GDPR, CCPA and other applicable data protection regulations.
• Develop and implement privacy policies, procedures, and governance frameworks.
• Conduct Data Privacy Impact Assessments (DPIAs) and identify privacy risks.
• Support data privacy breach management, incident investigation, and regulatory reporting.
• Drive Data Governance initiatives, including ISO 27701 (PIMS) assessments and certification.
• Assess third-party vendors for data privacy compliance and support privacy clauses in contracts.
• Support Consent Management and handle Data Principal Access Requests (DPARs).
• Promote privacy awareness and support employee data protection training.

Requirements:

• Bachelor's degree in Law, Information Security, Computer Science, or related field.
• 10+ years of experience in Data Privacy, Data Protection, Compliance, or a related field.
• Strong knowledge of DPDPA, GDPR, CCAOR or other privacy regulations.
• Experience in DPIA, privacy risk assessment, incident response, and data governance.
• Strong analytical, communication, and stakeholder management skills.
• CIPP, CIPM, or ISO 27701 certification will be an advantage.
• Knowledge of Privacy by Design and privacy-enhancing technologies is preferred.