Privacy Consultant

IQWorks; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

IQWorks is seeking a Privacy Consultant to interpret DPDP, GDPR, and PDPL obligations and translate them into practical compliance programs. You will work across IQWorks platforms, run assessments and data inventories, and stand up consent and notices for client environments.

The role is client-facing, based in Bangalore with local travel, and requires a technology-generalist mindset. Hybrid work and flexible hours are offered as we scale the privacy practice.

Qualifications

• 2+ years of relevant privacy experience
• 4+ client privacy projects delivered end to end
• Deep knowledge of India’s DPDP Act, GDPR, and PDPL regimes (UAE/Saudi)
• Proven ability to turn regulation into operational programs
• Hands-on experience with at least one enterprise privacy management platform
• Strong technology fundamentals and data flows understanding
• Excellent spoken communication and presentation skills
• Comfort owning client relationships end-to-end
• Capacity to leverage AI responsibly in privacy workflows
• Based in Bangalore with local travel willingness
• Available to join immediately or on short notice
• Self-starter in a fast-paced startup environment

Responsibilities

• Advise enterprise clients on DPDP, GDPR, PDPL regulations and translate obligations into practical compliance programs
• Run privacy assessments, gap analyses, and readiness reviews with remediation plans
• Build and maintain records of processing, data inventories, and data-flow maps
• Design consent, privacy notice, and data principal rights processes for IQWorks platform
• Lead client implementations — configure IQWorks products to match obligations
• Support DPIAs, vendor assessments, and breach readiness
• Act as trusted privacy advisor on accounts with cross-functional stakeholders
• Travel locally to client sites across Bangalore and other metros as needed
• Feed regulatory and client insights back into product development

Skills

Privacy consulting

Client management

Regulatory knowledge

Tech fundamentals

Communication skills

Travel readiness

Tools

ComplyIQ

ConsentIQ

Job description

About The Role

As a Privacy Consultant at IQWorks, you will be the privacy expert our enterprise clients rely on. You will interpret DPDP, GDPR, and PDPL obligations for real businesses, translate them into practical compliance programs, and operationalize those programs in ComplyIQ, ConsentIQ, and the wider IQWorks platform. You will run assessments and gap reviews, build records of processing, shape consent and notice frameworks, stand up data principal rights processes, and work alongside client teams to get the work done rather than hand over a slide deck. This is a client-facing role based in Bangalore, with regular local travel to client sites. We are looking for a technology generalist as much as a privacy specialist — you do not need to write code, but you should be comfortable with how data, systems, and applications fit together, because privacy advice that ignores the technology rarely survives an implementation. We support hybrid working and flexible hours, and we look for people who bring the consistency and responsiveness that client work depends on. This is a high-ownership role with room to grow into leading a privacy practice as we scale.

What You Will Do

• Advise enterprise clients on DPDP, GDPR, PDPL, and adjacent regulations, translating obligations into practical compliance programs
• Run privacy assessments, gap analyses, and readiness reviews, and turn the findings into prioritized remediation plans
• Build and maintain records of processing, data inventories, and data-flow mapping alongside client teams
• Design consent, privacy notice, and data principal rights processes, and stand them up in the IQWorks platform
• Lead client implementations — configure ComplyIQ, ConsentIQ, and related products to match each client’s obligations and workflows
• Support DPIAs, vendor and third-party assessments, and breach response readiness
• Act as the trusted privacy advisor on your accounts, running workshops and business reviews with legal, compliance, security, and IT stakeholders
• Travel locally to client sites across Bangalore, and to other Indian metros as engagements require
• Feed regulatory and client insights back into product so the platform reflects how compliance actually gets done

What We Are Looking For

• 2+ years of relevant privacy experience — privacy consulting, data protection, compliance, or an in-house privacy or DPO function
• 4+ client privacy projects delivered end to end — implementation and operationalization, not gap assessments and policy drafting alone
• Deep working knowledge of India’s DPDP Act, the GDPR, and the PDPL regimes in the UAE and Saudi Arabia, including where their obligations overlap and where they diverge
• Proven ability to turn regulation into operational programs rather than legal memos
• Hands-on experience implementing or administering at least one enterprise privacy management platform
• Strong technology fundamentals — comfortable reasoning about data, applications, databases, and integrations; no coding experience required
• Exceptional spoken communication and presentation skills — you can hold a room with legal, compliance, security, and IT stakeholders
• Comfort owning client relationships end to end, from scoping through delivery and ongoing advisory
• Effective use of AI as a force multiplier across the privacy workflow — regulatory research, assessment drafting, policy and notice preparation, and client reporting — with sharp judgment about where human oversight is essential so accuracy and client trust are never compromised
• Based in Bangalore, with willingness to travel locally to client sites
• Available to join immediately or on a short notice period
• Self-starter who thrives in a fast-paced, ambiguous startup environment

Nice to Have

• Privacy certification such as CIPP/E, CIPM, CIPT, or DCPP
• Experience serving as, or directly supporting, a Data Protection Officer
• Working knowledge of additional regimes such as HIPAA, CCPA, or sector guidance from regulators like RBI and IRDAI
• Depth across more than one privacy platform, or experience migrating a client from one to another
• Experience implementing or deploying enterprise software at customer sites
• Familiarity with security and governance frameworks such as ISO 27001 or SOC 2
• Technical fluency — SQL, APIs, or basic scripting — enough to reason about where personal data lives and how it moves
• Prior experience at a consulting firm, or as an early hire at a high-growth startup