Privacy Advisor- (Mumbai/Pune)

Zoho; Mumbai, Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Tsaaro is seeking a privacy consultant to help clients strengthen data protection programs across India. You will conduct DPIAs/PIAs, map data, assess risks, and help implement privacy governance, policies and controls.

You will advise on GDPR, DPDP Act, CCPA/CPRA, and other regulations, support DSR processes, vendor due diligence, and work with cross-functional teams to translate regulatory changes into practical actions.

Qualifications

• 4-6 years of experience in data privacy, privacy consulting, data protection, or a related field.
• People locally available in Pune and Mumbai are preferred.
• CIPP/E certification is preferred.
• Strong knowledge of GDPR and European data protection requirements, plus DPDP Act, CCPA/CPRA, PDPL.
• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and governance.
• Familiarity with OneTrust, Securiti.ai, BigID or similar privacy platforms.
• Understanding of ISO 27001, NIST, or other GRC frameworks.

Responsibilities

• Conduct privacy assessments including DPIAs, PIAs, RoPA, data mapping, gap assessments, and privacy audits.
• Provide advisory support on GDPR, DPDP Act, CCPA/CPRA, DPDP Act, and other privacy regulations.
• Develop and implement privacy policies, procedures, governance frameworks, and compliance controls.
• Support Privacy by Design/Default initiatives across client projects.
• Assist with Data Subject Rights (DSR) processes and privacy incident management.
• Conduct third-party privacy risk assessments and vendor due diligence.
• Work with Legal, Compliance, Security, Product, and Engineering teams to implement privacy requirements.
• Track regulatory developments and translate changes into practical compliance actions.
• Support client discussions, documentation, presentations, and project delivery.

Skills

Privacy assessments

Regulatory compliance

Stakeholder management

Policy development

Privacy by Design

DSR processes

Vendor due diligence

Tools

OneTrust

Securiti.ai

BigID

Job description

Mumbai,Pune, India | Posted on 10/07/2026

Lead Privacy Advisory. Strengthen Compliance. Enable Trust.

Tsaaro is looking for a privacy consultantwith strong expertise in data protection regulations and practical privacy compliance. The role will involve delivering privacy. Assessments, advising clients on regulatory requirements, and supporting the implementation of privacy governance programs.

Key Responsibilities

• Conduct privacy assessments including DPIAs, PIAs, RoPA, data mapping, gap assessments, and privacy audits .


• Provide advisory support on GDPR, CCPA/CPRA, DPDP Act, PDPL and other global privacy regulations.


• Develop and implement privacy policies, procedures, governance frameworks, and compliance controls .


• Support Privacy by Design/Default initiatives across client projects.


• Assist with Data Subject Rights (DSR) processes and privacy incident management.


• Conduct third-party privacy risk assessments and vendor due diligence .


• Work with Legal, Compliance, Security, Product, and Engineering teams to implement privacy requirements.


• Track regulatory developments and translate changes into practical compliance actions.


• Support client discussions, documentation, presentations, and project delivery.

Requirements

• 4-6 years of experience in data privacy, privacy consulting, data protection, or a related field.


• People Locally available in Pune and Mumbai are preferred


• CIPP/E certification is preferred


• Strong knowledge of GDPR and European data protection requirements , along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.


• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance .


• Familiarity with OneTrust, Securiti.ai, BigID , or similar privacy technology platforms.


• Understanding of ISO 27001, NIST, or other relevant GRC frameworks .


• Strong client-facing, analytical, documentation, and stakeholder management skills.


• Ability to manage multiple privacy projects independently and deliverables.


• 4-6 years of experience in data privacy, privacy consulting, data protection, or a related field.


• CIPP/E certification is good to have .


• Strong knowledge of GDPR and European data protection requirements , along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.


• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance .


• Familiarity with OneTrust, Securiti.ai, BigID , or similar privacy technology platforms.


• Understanding of ISO 27001, NIST, or other relevant GRC frameworks .


• Strong client-facing, analytical, documentation, and stakeholder management skills.


• Ability to manage multiple privacy projects independently and deliverables.