Privacy Consultant

Zoho; Pune District, Mumbai; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Tsaaro is seeking a privacy consultant with strong expertise in data protection to deliver privacy assessments, advise on regulatory requirements, and help implement privacy governance programs.

You will work with clients to perform DPIAs, data mapping, RoPA, and privacy audits, while collaborating with Legal, Compliance, Security, Product, and Engineering teams to apply privacy controls and drive compliance initiatives.

Qualifications

• 1–2 years of experience in data privacy, privacy consulting, data protection, or a related field.
• People locally available in Pune and Mumbai are preferred.
• CIPP/E certification is preferred.
• Strong knowledge of GDPR and European data protection requirements, with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.
• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance.
• Familiarity with privacy platforms such as OneTrust, Securiti.ai, BigID or similar tools.
• Understanding of ISO 27001, NIST, or other relevant GRC frameworks.
• Strong client-facing, analytical, documentation, and stakeholder management skills.

Responsibilities

• Conduct privacy assessments including DPIAs, PIAs, RoPA, data mapping, gap assessments, and privacy audits.
• Provide advisory support on GDPR, CCPA/CPRA, DPDP Act, PDPL, and other global privacy regulations.
• Develop and implement privacy policies, procedures, governance frameworks, and compliance controls.
• Support Privacy by Design/Default initiatives across client projects.
• Assist with Data Subject Rights (DSR) processes and privacy incident management.
• Conduct third-party privacy risk assessments and vendor due diligence.
• Work with Legal, Compliance, Security, Product, and Engineering teams to implement privacy requirements.
• Track regulatory developments and translate changes into practical compliance actions.
• Support client discussions, documentation, presentations, and project delivery.

Skills

Privacy assessments

DPIAs

Data mapping

GDPR knowledge

DSR processes

Vendor risk assessments

Privacy governance

Client-facing

Project management

Education

CIPP/E certification

Tools

OneTrust

Securiti.ai

BigID

Job description

Lead Privacy Advisory. Strengthen Compliance. Enable Trust.

Tsaaro is looking for a privacy consultantwith strong expertise in data protection regulations and practical privacy compliance. The role will involve delivering privacy. Assessments, advising clients on regulatory requirements, and supporting the implementation of privacy governance programs.

Key Responsibilities

• Conduct privacy assessments including DPIAs, PIAs, RoPA, data mapping, gap assessments, and privacy audits .
• Provide advisory support on GDPR, CCPA/CPRA, DPDP Act, PDPL and other global privacy regulations.
• Develop and implement privacy policies, procedures, governance frameworks, and compliance controls .
• Support Privacy by Design/Default initiatives across client projects.
• Assist with Data Subject Rights (DSR) processes and privacy incident management.
• Conduct third-party privacy risk assessments and vendor due diligence .
• Work with Legal, Compliance, Security, Product, and Engineering teams to implement privacy requirements.
• Track regulatory developments and translate changes into practical compliance actions.
• Support client discussions, documentation, presentations, and project delivery.

Requirements

• 1-2 years of experience in data privacy, privacy consulting, data protection, or a related field.
• People Locally available in Pune and Mumbai are preferred
• CIPP/E certification is preferred
• Strong knowledge of GDPR and European data protection requirements , along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.
• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance .
• Familiarity with OneTrust, Securiti.ai, BigID , or similar privacy technology platforms.
• Understanding of ISO 27001, NIST, or other relevant GRC frameworks .
• Strong client-facing, analytical, documentation, and stakeholder management skills.
• Ability to manage multiple privacy projects independently and deliverables.
• 1-2 years of experience in data privacy, privacy consulting, data protection, or a related field.
• CIPP/E certification is good to have .
• Strong knowledge of GDPR and European data protection requirements , along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.
• Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance .
• Familiarity with OneTrust, Securiti.ai, BigID , or similar privacy technology platforms.
• Understanding of ISO 27001, NIST, or other relevant GRC frameworks .
• Strong client-facing, analytical, documentation, and stakeholder management skills.
• Ability to manage multiple privacy projects independently and deliverables.