Privacy Consultant

IQWorks Technologies Private Limited; Mumbai; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

IQWorks Technologies Private Limited seeks a Privacy Consultant to interpret DPDP, GDPR, and PDPL obligations for enterprise clients and translate them into practical compliance programs. You will operationalize these programs within the IQWorks platform and lead client implementations across privacy products.

The role is Mumbai-based with local travel and a hybrid work model. We value a technology generalist who can connect data, systems, and applications to privacy outcomes, and who can grow

Qualifications

• 2+ years of privacy experience across consulting, data protection, compliance, or in-house DPO roles.
• 4+ client privacy projects delivered end to end, including implementation and operationalization.
• Deep knowledge of India's DPDP Act, GDPR, and UAE/Saudi PDPL regimes, including overlaps and divergences.
• Ability to translate regulation into actionable programs and roadmaps.
• Hands-on experience with at least one enterprise privacy management tool.
• Strong technology literacy and ability to reason about data, apps, and integrations.
• Exceptional communication and presentation skills across legal, compliance, security, and IT stakeholders.
• Proven ability to manage client relationships from scoping to delivery.
• Experience leveraging AI to enhance regulatory research, drafting, and reporting with human oversight.
• Based in Mumbai with willingness to travel locally to client sites.

Responsibilities

• Advise enterprise clients on DPDP, GDPR, and PDPL, translating obligations into practical programs.
• Run privacy assessments, gap analyses, and readiness reviews with prioritized remediation plans.
• Develop records of processing, data inventories, and data-flow mappings with client teams.
• Design consent notices and data subject rights processes in IQWorks platforms.
• Lead client implementations by configuring ComplyIQ, ConsentIQ, and related products.
• Support DPIAs, vendor assessments, and breach readiness activities.
• Act as trusted privacy advisor in workshops and business reviews with cross-functional stakeholders.
• Travel locally to client sites across Mumbai and other Indian metros as needed.
• Feed client insights back into product to reflect real-world privacy workflows.

Skills

Privacy consulting

DPDP/GDPR/PDPL knowledge

Operationalizing compliance

Enterprise privacy platform experience

Technology fundamentals

Client relationship management

Stakeholder workshop facilitation

AI in privacy workflows

Travel readiness

Immediate joiner

Tools

Privacy management platform

Job description

As a Privacy Consultant at IQWorks, you will be the privacy expert our enterprise clients rely on. You will interpret DPDP, GDPR, and PDPL obligations for real businesses, translate them into practical compliance programs, and operationalize those programs in ComplyIQ, ConsentIQ, and the wider IQWorks platform. You will run assessments and gap reviews, build records of processing, shape consent and notice frameworks, stand up data principal rights processes, and work alongside client teams to get the work done rather than hand over a slide deck. This is a client-facing role based in Mumbai, with regular local travel to client sites. We are looking for a technology generalist as much as a privacy specialist — you do not need to write code, but you should be comfortable with how data, systems, and applications fit together, because privacy advice that ignores the technology rarely survives an implementation. We support hybrid working and flexible hours, and we look for people who bring the consistency and responsiveness that client work depends on. This is a high-ownership role with room to grow into leading a privacy practice as we scale.

Responsibilities

• Advise enterprise clients on DPDP, GDPR, PDPL, and adjacent regulations, translating obligations into practical compliance programs
• Run privacy assessments, gap analyses, and readiness reviews, and turn the findings into prioritized remediation plans
• Build and maintain records of processing, data inventories, and data-flow mapping alongside client teams
• Design consent, privacy notice, and data principal rights processes, and stand them up in the IQWorks platform
• Lead client implementations — configure ComplyIQ, ConsentIQ, and related products to match each client’s obligations and workflows
• Support DPIAs, vendor and third-party assessments, and breach response readiness
• Act as the trusted privacy advisor on your accounts, running workshops and business reviews with legal, compliance, security, and IT stakeholders
• Travel locally to client sites across Mumbai, and to other Indian metros as engagements require
• Feed regulatory and client insights back into product so the platform reflects how compliance actually gets done

Requirements

• 2+ years of relevant privacy experience — privacy consulting, data protection, compliance, or an in‑house privacy or DPO function
• 4+ client privacy projects delivered end to end — implementation and operationalization, not gap assessments and policy drafting alone
• Deep working knowledge of India’s DPDP Act, the GDPR, and the PDPL regimes in the UAE and Saudi Arabia, including where their obligations overlap and where they diverge
• Proven ability to turn regulation into operational programs rather than legal memos
• Hands‑on experience implementing or administering at least one enterprise privacy management platform
• Strong technology fundamentals — comfortable reasoning about data, applications, databases, and integrations; no coding experience required
• Exceptional spoken communication and presentation skills — you can hold a room with legal, compliance, security, and IT stakeholders
• Comfort owning client relationships end to end, from scoping through delivery and ongoing advisory
• Effective use of AI as a force multiplier across the privacy workflow — regulatory research, assessment drafting, policy and notice preparation, and client reporting — with sharp judgment about where human oversight is essential so accuracy and client trust are never compromised
• Based in Mumbai, with willingness to travel locally to client sites
• Available to join immediately or on a short notice period
• Self‑starter who thrives in a fast‑paced, ambiguous startup environment

Nice to Have

• Privacy certification such as CIPP/E, CIPM, CIPT, or DCPP
• Experience serving as, or directly supporting, a Data Protection Officer
• Working knowledge of additional regimes such as HIPAA, CCPA, or sector guidance from regulators like RBI and IRDAI
• Depth across more than one privacy platform, or experience migrating a client from one to another
• Experience implementing or deploying enterprise software at customer sites
• Familiarity with security and governance frameworks such as ISO 27001 or SOC 2
• Technical fluency — SQL, APIs, or basic scripting — enough to reason about where personal data lives and how it moves
• Prior experience at a consulting firm, or as an early hire at a high‑growth startup