DPDP Consultant

Kainskep Solutions; Jaipur; On-site; INR 1,500,000 - 2,400,000; Full time

Job summary

Kainskep Solutions in Jaipur, Rajasthan, is seeking an Information Security & Data Privacy Consultant with 2–4 years of experience to strengthen information security and privacy compliance capabilities. You will work on ISO 27001, GDPR, DPDP readiness, and data privacy initiatives across the organization.

Responsibilities include risk assessments, audits, policy development, data mapping, and collaboration with stakeholders and auditors to ensure conformance with applicable laws and standards.

Qualifications

• 2–4 years of experience in information security, GRC, IT audit, or privacy.
• Hands-on knowledge of ISO 27001 controls, risk assessments and audits.
• Understanding of SOC 2 principles and privacy compliance.
• Familiarity with India's DPDP Act, 2023 and its Rules.
• Strong documentation, analytical, communication, and stakeholder management skills.
• Ability to identify compliance gaps and recommend remediation measures.

Responsibilities

• Conduct information security gap assessments, risk assessments, and compliance reviews.
• Support ISO 27001 implementation, internal audits, external audits, and ISMS maintenance.
• Assist with SOC 2 readiness, control mapping, evidence collection, and audit documentation.
• Interpret GDPR requirements and support privacy compliance activities.
• Understand India's DPDP Act and Rules, and assist with organizational readiness and compliance initiatives.
• Develop and maintain security policies, privacy notices, procedures, risk registers, and compliance documentation.
• Identify compliance gaps and coordinate corrective and preventive actions.
• Support data mapping, personal data inventory, data retention, consent management, and breach response processes.
• Coordinate with internal teams, auditors, clients, and other stakeholders on security and compliance matters.

Skills

Information Security

GRC

ISO 27001

Data Privacy

GDPR

DPDP Act

Audit & Assurance

Stakeholder Management

Job description

Job Description: Information Security & Data Privacy Consultant

Company: Kainskep Solutions
Experience: 2-4 Years
Location: Jaipur, Rajasthan
Employment Type: Full-time

About the Role

We are looking for a proactive professional who can help build and strengthen information security and data privacy compliance capabilities. Candidates with strong ISO 27001, GRC, and GDPR experience are encouraged to apply, even if they have limited direct implementation experience with India's DPDP framework.

Key Responsibilities

• Conduct information security gap assessments, risk assessments, and compliance reviews.
• Support ISO 27001 implementation, internal audits, external audits, and maintenance of Information Security Management Systems (ISMS).
• Assist with SOC 2 readiness, control mapping, evidence collection, and audit documentation.
• Interpret GDPR requirements and support privacy compliance activities.
• Understand India's DPDP Act and applicable Rules, and assist with organizational readiness and compliance initiatives.
• Develop and maintain security policies, privacy notices, procedures, risk registers, and compliance documentation.
• Identify compliance gaps and coordinate corrective and preventive actions.
• Support data mapping, personal data inventory, data retention, consent management, and personal data breach response processes.
• Coordinate with internal teams, auditors, clients, and other stakeholders on security and compliance matters.

Required Skills and Qualifications

• 34 years of experience in information security, Governance, Risk & Compliance (GRC), IT audit, privacy compliance, or a related field.
• Practical knowledge of ISO 27001, including security controls, risk assessments, and audit processes.
• Understanding of SOC 2 principles and compliance requirements.
• Working knowledge of GDPR and data protection principles.
• Familiarity with India's DPDP Act, 2023, and its Rules.
• Strong documentation, analytical, communication, and stakeholder management skills.
• Ability to identify compliance gaps and recommend practical remediation measures.
• Proficiency in preparing audit evidence, compliance reports, policies, and risk assessment documentation.

Preferred Qualifications

• Experience supporting ISO 27001 certification or surveillance audits.
• Exposure to SOC 2 Type I or Type II readiness and assessments.
• Experience in privacy impact assessments, data mapping, or privacy program implementation.
• Certifications such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CISA, or relevant privacy certifications.
• Experience in a consulting, IT services, SaaS, or cybersecurity environment.