Senior Data Privacy Consultant

Tsaaro People Consulting; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Competitive salary

Bonuses

Professional development

Flexible working hours

Collaborative environment

Job summary

Tsaaro People Consulting in Mumbai is looking for a Senior Data Privacy Consultant to design and implement privacy programs, aligning with ISO standards and GDPR requirements.

You will audit privacy controls, advise on governance, and assist with certifications, risk assessments, and incident management to protect client data. Strong communication and 2–3 years' experience, plus CIPM/CIPT/CIPP/E qualifications, are essential.

Qualifications

• Sound knowledge of information security fundamentals.
• 2-3 years of relevant experience in the field.
• Proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST cyber security, HITRUST, ISO 27701.
• Understanding GDPR, CCPA, or other privacy laws.
• Governance, reporting, and risk management capabilities.
• Certifications CIPM/CIPT/CIPP/E are desirable.

Responsibilities

• Design and implement data protection and privacy programs for clients.
• Evaluate and improve clients' data protection practices with actionable insights.
• Assist in audits, ISMS documentation, and certification support.
• Guide compliance with GDPR and other privacy laws for clients.
• Prepare policies, reports, and schedules; communicate clearly with stakeholders.
• Support incident management and data subject rights processes.

Skills

Information security fundamentals

ISO 27001/2 knowledge

Privacy risk governance

GDPR/CCPA understanding

Policy, reports, and schedules

Strong communication skills

Education

CIPM

CIPT

CIPP/E

Job description

Job Description:

Job Description

About Us

Tsaaro is dedicated to Data Privacy and Security as its core focus. Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions. Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints.

At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice. By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges.

Responsibilities

As a Senior Data Privacy Consultant, you will be entrusted with the following key responsibilities:

• Design and implement data protection and privacy programs that cater to our clients' specific business needs, ensuring their sensitive information is well safeguarded.
• Evaluate and assess our clients' data protection and privacy practices, offering valuable insights and actionable recommendations for continual improvement.
• Demonstrate expertise in various standards, such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc., to assist clients in compliance and governance.
• Provide guidance and support to clients in adhering to a complex web of national and international laws and regulations, including the EU General Data Protection Regulation (GDPR) and other privacy laws.
• Assist in preparing policies, reports, and schedules for clients and relevant stakeholders, ensuring clear communication and alignment with industry best practices.
• Conduct thorough audits of Privacy controls to monitor program effectiveness and compliance, ensuring data protection is at its optimal level.
• Utilize online tools to facilitate Incident Management and Data Subject Rights processes, ensuring efficient and timely responses to potential data incidents.
• Foster and maintain productive working relationships with client personnel, promoting effective collaboration and understanding of their specific needs.
• Demonstrate a strong commitment to adhering to workplace policies and procedures, maintaining the highest standards of professionalism and confidentiality.
• Contribute to cybersecurity engagements, developing cybersecurity strategies, governance, risk, and compliance activities, and cybersecurity policies in line with ISO 27001 and ISO 27701.
• Perform Gap Assessments, Risk Assessments, ISMS Documentation, Internal Audits, and support during Certification Audits to strengthen overall security frameworks.

Requirements

To be considered for this role, the candidate must meet the following requirements:

• Possess a sound knowledge of fundamentals of information security systems.
• Have 2-3 years of relevant experience in the field.
• Demonstrate proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc.
• Exhibit a good understanding of GDPR, CCPA, or other privacy laws.
• Display competence in governance and reporting, as well as a strong grasp of cyber and privacy risks.
• Hold relevant qualifications such as CIPM, CIPT, CIPP/E.
• Showcase excellent communication skills, both written and verbal.

Benefits

• Competitive salary and performance-based bonuses.
• Professional development opportunities, including training and certifications.
• Flexible working hours.
• Collaborative and inclusive work environment.
• Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.