DPDP Compliance Specialist

AXIS DIRECT; Navi Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

AXIS DIRECT is seeking a DPDP Compliance Specialist with 2+ years of experience in data privacy, compliance, risk management, or information security. The role focuses on DPDP governance, framework implementation, policy management, and regulatory compliance.

You will collaborate with Legal, IT, Information Security, HR, Procurement, and business teams to ensure DPDP requirements are implemented effectively, manage RoPA, DPIAs, data inventories, and support audits and training.

Qualifications

• 2+ years of experience in DPDP privacy, governance, risk management, or information security.
• Strong understanding of DPDP Act 2023 and compliance requirements.
• Experience with privacy governance, assessments, and audit coordination.
• Knowledge of RoPA, data mapping, DPIAs, data retention, and data protection.
• Experience with consent management tools.

Responsibilities

• Support DPDP governance framework maintenance and improvement.
• Develop, review, and maintain DPDP policies, standards, and controls.
• Conduct DPDP assessments and track remediation actions to closure.
• Maintain compliance registers, control matrices, and governance dashboards.
• Assist in RoPA, data inventories, and data flow documentation.
• Support Privacy Impact Assessments (PIAs/DPIAs) for new products and processes.
• Coordinate with Legal, IT, HR, Procurement, and business teams to implement DPDP requirements.
• Assist Data Principal rights management (access, erasure, consent withdrawal).
• Support incident management and regulatory reporting for privacy events.
• Assist third-party privacy assessments and contract data protection requirements.
• Plan/internal/external DPDP audits and compliance reviews.
• Prepare governance reports and compliance metrics.
• Conduct employee privacy awareness training.

Skills

DPDP knowledge

Privacy governance

Policy development

Audit coordination

Risk management

Consent management

Documentation

Stakeholder management

Cross-functional collaboration

Tools

Consent Management Tool

Job description

Position Overview

We are looking for a DPDP Compliance Specialist with 2 plus years of experience in data privacy, compliance, risk management, or information security. The role will primarily focus on DPDP compliance governance, framework implementation, policy management, risk assessment, audits, and regulatory compliance.

Key Responsibilities

• Support the implementation, maintenance, and continuous improvement of the organizations DPDP compliance and governance framework.
• Develop, maintain, and review DPDP policies, standards, procedures, guidelines, and compliance controls.
• Conduct DPDP compliance assessments and gap assessments and track remediation actions to closure.
• Maintain compliance registers, control matrices, evidence repositories, and governance dashboards.
• Support identification, assessment, and mitigation of privacy and data protection risks.
• Assist in maintaining Records of Processing Activities (RoPA), data inventories, and data flow documentation.
• Support Privacy Impact Assessments (PIAs/DPIAs) for new products, applications, processes, and business initiatives.
• Coordinate with Legal, IT, Information Security, HR, Procurement, and business teams to ensure DPDP requirements are implemented effectively.
• Support Data Principal rights management, including access, correction, erasure, consent withdrawal, and grievance management.
• Assist with personal data breach/incident management, including investigation, documentation, escalation, and regulatory compliance requirements.
• Support third-party/vendor privacy assessments and ensure appropriate data protection requirements are incorporated into contracts and agreements.
• Plan and coordinate internal/external DPDP audits, compliance reviews, and regulatory assessments.
• Prepare periodic DPDP governance reports, management dashboards, risk reports, and compliance metrics.
• Conduct employee privacy awareness and DPDP training programs.
• Monitor changes in privacy regulations and provide regulatory impact assessments and recommendations to stakeholders.
• Support the organization in establishing and monitoring privacy-by-design and data protection controls.

Consent Management

• Hands-on experience with Consent Management Tools/Platforms, including consent capture, preference management, withdrawal, and maintenance of consent records.
• Support configuration, monitoring, and reporting of consent mechanisms and ensure alignment with DPDP consent requirements and auditability.

Required Skills & Qualifications

• 2 plus years of experience in DPDP, Data Privacy, GDPR, GRC, Information Security, Risk, or Compliance.
• Strong understanding of the Digital Personal Data Protection Act, 2023 and its compliance requirements.
• Practical experience in privacy governance, compliance assessments, risk management, policy development, and audit coordination.
• Good understanding of RoPA, data mapping, privacy impact assessments, data retention, data classification, breach management, and Data Principal rights.
• Hands-on experience with a Consent Management Tool.
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Experience working with cross-functional teams and managing compliance activities.

Preferred Certifications

• CIPP/E, CIPM, CIPT, or equivalent privacy certification.
• ISO 27001 / ISO 27701 certification or knowledge.
• DPDP/Indian Data Privacy certification or training.