Hiring For Senior Senior Data Privacy and GRC Consultant - Pune - WFO

Nihilent; Pune District; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Nihilent Ltd. is seeking an experienced Data Privacy & GRC professional to lead privacy compliance across multiple geographies. You will drive DPIA/PIA activities, manage privacy artefacts, and coordinate with senior management to align controls with global frameworks.

The role requires 8–10 years in IT and information security, with at least 5 years in GRC/compliance, and hands-on experience in ISO 27001 implementations and privacy training.

Qualifications

• Bachelor's degree in IT/CS/Engineering or related field.
• 8–10 years IT/security experience with 5+ years in GRC/compliance.
• Led ISO 27001 implementations achieving certification.
• Knowledge of ISO 22301/ISO 27701 and SOC 2/NIST HIPAA.
• Familiar with DPDP Act 2023 and GDPR.
• Experience with vulnerability management, VAPT, network security.
• Client-facing consulting experience including managing engagements.

Responsibilities

• Assist compliance across GDPR, DPDP and global privacy acts.
• Review/update privacy/security artefacts for clients across geographies.
• Conduct privacy training for internal stakeholders and freshers.
• Coordinate with Senior Management for privacy implementations.
• Drive discussions with clients globally.
• Translate regulatory requirements into operational configurations.
• Operationalize Privacy Principles implementations.
• Lead and execute DPIA/PIA for high-risk processing.
• Track data flows to establish data inventories.
• Coordinate with privacy vendors for DPDPA roadmap.

Skills

GRC

Privacy training

Stakeholder management

Client-facing consulting

Auditing

Education

Bachelors in IT

Job description

Required qualifications and experience

• Bachelors degree in information technology, Computer Science, Engineering or a related field.
• 8 to 10 years of total experience in IT and information security, with at least 5 years in GRC, compliance or security consulting.
• Led at least 1 - 2 end-to-end ISO 27001 implementations that achieved certification, with hands-on audit-readiness experience.
• Working knowledge of ISO 22301 and ISO 27701, plus at least one of SOC 2, NIST CSF or HIPAA.
• Practical experience with data privacy regulations, ideally DPDP Act 2023 and GDPR.
• Hands-on familiarity with vulnerability management, VAPT and network security concepts.
• Experience in client-facing consulting roles, including managing engagements or small project teams.

Key responsibilities Data Privacy Compliance & Execution

• Assist in adhering to Privacy Acts across global geographies (GDPR, DPDPA, POPIA, CCPA, etc)
• Review and update artefacts related to Privacy and Information Security for clients executing out of various geographies.
• Should be able to conduct privacy training for internal stakeholders and freshers on regular intervals.
• Coordinate with Senior Management for discussions and reviews of Privacy and Information Security implementations.
• Should be able to drive discussions with Clients across the globe.
• Should be able to translate regulatory requirements from global frameworks into concrete operational configurations, minimizing risk exposure while maximizing processing efficiency.
• Operationalize Privacy Principles Implementations.
• Lead and execute DPIA/PIA for high-risk data processing systems and dynamically maintain, and audit the Record of processing activities.
• Discover, classify, and track data flows across all business verticals to establish crystal-clear data inventory lineages.
• Help in coordinating with privacy vendors in the implementation of DPDPA, by coordinating with stakeholders internally and driving as per the roadmap.

Professional skills

• Excellent verbal and written communication; confident in workshops and board-level presentations.
• Stakeholder management across cultures and time zones.
• Training and facilitation ability for awareness sessions and formal courses.
• Structured, detail-oriented and able to manage several client engagements at once.
• Willingness to travel for client assessments and audits as required.