Senior Data Privacy Consultant

Tsaaro People Consulting; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Performance bonuses

Training & certifications

Flexible hours

Collaborative environment

Specialized team

Job summary

Tsaaro People Consulting in Maharashtra, India seeks a privacy and information security professional with 2–3 years of experience to design, implement, and audit data protection programs for diverse clients. You will advise on GDPR compliance, risk governance, and incident response while developing certification-ready documentation.

The role emphasizes practical, risk-based guidance, collaboration with clients, and delivering actionable recommendations to strengthen privacy and security programs.

Qualifications

• 2–3 years of relevant experience in information security.
• Knowledge of ISO 27001/2, ISO 22301, ISO 27018, NIST Cyber Security standards, HITRUST, ISO 27701.
• Understanding of GDPR, CCPA, or other privacy laws.
• Strong governance, reporting, and risk management skills.
• Professional certifications such as CIPM, CIPT, or CIPP/E are desirable.
• Excellent written and verbal communication skills.

Responsibilities

• Design and implement privacy programs tailored to client needs.
• Assess clients' data protection practices and provide actionable recommendations.
• Advise on compliance with national and international privacy laws including GDPR.
• Prepare policies, reports, and schedules for stakeholders.
• Conduct privacy control audits and support certification processes.
• Contribute to cybersecurity engagements and governance activities.
• Collaborate with clients to maintain professional standards and confidentiality.

Skills

Information security fundamentals

Governance & reporting

Cybersecurity risk awareness

Communication skills

Education

CIPM

CIPT

CIPP/E

Job description

Job Description

About Us

Tsaaro is dedicated to Data Privacy and Security as its core focus. Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions. Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints.

At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice. By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges.

Responsibilities

• Design and implement data protection and privacy programs that cater to our clients' specific business needs, ensuring their sensitive information is well safeguarded.
• Evaluate and assess our clients' data protection and privacy practices, offering valuable insights and actionable recommendations for continual improvement.
• Demonstrate expertise in various standards, such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc., to assist clients in compliance and governance.
• Provide guidance and support to clients in adhering to a complex web of national and international laws and regulations, including the EU General Data Protection Regulation (GDPR) and other privacy laws.
• Assist in preparing policies, reports, and schedules for clients and relevant stakeholders, ensuring clear communication and alignment with industry best practices.
• Conduct thorough audits of Privacy controls to monitor program effectiveness and compliance, ensuring data protection is at its optimal level.
• Utilize online tools to facilitate Incident Management and Data Subject Rights processes, ensuring efficient and timely responses to potential data incidents.
• Foster and maintain productive working relationships with client personnel, promoting effective collaboration and understanding of their specific needs.
• Demonstrate a strong commitment to adhering to workplace policies and procedures, maintaining the highest standards of professionalism and confidentiality.
• Contribute to cybersecurity engagements, developing cybersecurity strategies, governance, risk, and compliance activities, and cybersecurity policies in line with ISO 27001 and ISO 27701.
• Perform Gap Assessments, Risk Assessments, ISMS Documentation, Internal Audits, and support during Certification Audits to strengthen overall security frameworks.

Requirements

• Possess a sound knowledge of fundamentals of information security systems.
• Have 2-3 years of relevant experience in the field.
• Demonstrate proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc.
• Exhibit a good understanding of GDPR, CCPA, or other privacy laws.
• Display competence in governance and reporting, as well as a strong grasp of cyber and privacy risks.
• Hold relevant qualifications such as CIPM, CIPT, CIPP/E.
• Showcase excellent communication skills, both written and verbal.

Benefits

• Competitive salary and performance-based bonuses.
• Professional development opportunities, including training and certifications.
• Flexible working hours.
• Collaborative and inclusive work environment.
• Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.