Privacy Consultant

Persistent; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Flexible work hours

Annual health check-ups

Group term life insurance

Mediclaim hospitalization for family

Job summary

Persistent is seeking a Privacy Consultant in Mumbai with 3–5 years of experience in Data Privacy, Risk Management, and Regulatory Compliance. You will conduct DPIAs, privacy risk assessments, and third‑party privacy due diligence, ensuring DPDP Act 2023 and GDPR alignment across business units.

You will collaborate with Legal, Procurement, Infosec, Technology, and Business teams to close privacy gaps and maintain audit‑ready records.

Qualifications

• 3–5 years of experience in Data Privacy, Data Protection, Privacy Compliance, Risk Management or Privacy Consulting.
• Strong knowledge of DPDP Act 2023, GDPR principles, and risk management practices.
• Experience conducting DPIAs/PIAs and third‑party privacy due diligence.
• Ability to review data processing agreements and vendor contracts.

Responsibilities

• Conduct end‑to‑end DPIAs and privacy risk assessments for products and processes.
• Assess privacy risks in technology deployments and regulatory compliance initiatives.
• Perform third‑party privacy due diligence for processors, vendors, and sub‑processors.
• Evaluate contracts for privacy obligations and DPDP/GDPR compliance.
• Collaborate with Legal, Procurement, Infosec, Technology, and Business teams.
• Track findings, remediation actions, and evidence of closure through governance processes.
• Support privacy governance, risk reporting, and DPO governance updates.
• Maintain privacy assessment repositories and audit‑ready documentation.
• Contribute to privacy-by-design and controls across projects.

Skills

Data Privacy

DPIAs

Privacy risk assessments

DPDP Act 2023 knowledge

GDPR principles

Privacy governance frameworks

Contract/privacy clauses review

Vendor privacy due diligence

Stakeholder management

Privacy documentation & reporting

Tools

ISO/IEC 27701

Job description

About Position:

We are seeking a Privacy Consultant with 3 to 5 years of experience in Data Privacy, Privacy Risk Management, and Regulatory Compliance. The ideal candidate will support the Data Privacy function by conducting Data Protection Impact Assessments (DPIAs), privacy risk assessments, and third-party privacy due diligence activities. This role requires strong knowledge of India's Digital Personal Data Protection Act (DPDP Act, 2023), GDPR principles, privacy governance frameworks, and risk management practices. The candidate will work closely with Legal, Procurement, Information Security, Technology, and Business teams to identify, assess, and mitigate privacy risks while ensuring compliance with applicable regulations and organizational policies.

• Role: Privacy Consultant - Data Protection & Compliance
• Location: Mumbai
• Experience: 3 to 5 Years
• Job Type: Full-Time Employment

What You'll Do:

• Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, technology initiatives, business processes, and data processing activities.
• Assess privacy risks associated with technology deployments, digital transformation programs, data-sharing activities, and regulatory compliance initiatives.
• Perform third-party and vendor privacy due diligence assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
• Evaluate business and technology processes for compliance with the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, GDPR principles, and internal privacy policies.
• Review and assess data protection clauses, privacy provisions, and regulatory obligations within contracts and vendor agreements.
• Collaborate with Legal, Procurement, Information Security, Technology, and Business stakeholders to close identified compliance and privacy gaps.
• Track privacy risks, findings, recommendations, remediation actions, and evidence of closure through governance processes.
• Support privacy governance activities, risk reporting, and management updates for the Data Protection Officer (DPO) and governance committees.
• Maintain privacy assessment repositories, compliance records, risk registers, and audit-ready documentation.
• Support implementation of privacy-by-design principles and privacy risk management controls across projects and operational activities.
• Assist in developing privacy standards, control frameworks, assessment templates, and compliance procedures.
• Participate in privacy awareness initiatives, policy reviews, and regulatory readiness programs.
• Support internal audits, compliance reviews, and privacy-related governance activities.
• Monitor regulatory developments and assist in evaluating their impact on organizational privacy programs.

Expertise You'll Bring:

• 3 to 5 years of experience in Data Privacy, Data Protection, Privacy Compliance, Risk Management, or Privacy Consulting roles.
• Hands-on experience conducting Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) from initiation through remediation tracking.
• Strong understanding of the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, and associated compliance requirements.
• Good knowledge of GDPR principles, privacy rights, consent management, lawful processing, and accountability requirements.
• Understanding of privacy governance frameworks, privacy risk assessment methodologies, and privacy management practices.
• Knowledge of ISO/IEC 27701 and privacy information management system concepts.
• Experience evaluating privacy controls across business, technology, and third-party ecosystems.
• Ability to review contracts, vendor agreements, and data processing arrangements from a privacy compliance perspective.
• Experience working with cross-functional stakeholders including Legal, Procurement, Information Security, Risk, Compliance, Technology, and Business teams.
• Strong privacy documentation, report writing, risk assessment, and analytical skills.
• Understanding of vendor risk management and third-party privacy assessment processes.
• Familiarity with privacy-by-design principles and privacy control implementation strategies.
• Strong communication, stakeholder management, and presentation skills.
• Excellent analytical thinking, attention to detail, and problem-solving capabilities.
• Ability to manage multiple assessments and deadlines in a fast-paced environment.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent-persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."