Senior Data Privacy Consultant

Tsaaro People Consulting; Mumbai; On-site; INR 700,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Flexible working hours

Collaborative environment

Industry certifications

Job summary

Tsaaro People Consulting is a data privacy and security consultancy based in Mumbai. We are seeking a Privacy and Security Consultant with 2-3 years of relevant experience to design and audit privacy programs, assess governance, and guide clients through GDPR and other privacy regulations.

The role emphasizes practical, risk-based advice, stakeholder communication, and delivering concrete recommendations to strengthen data protection.

Qualifications

• Sound knowledge of information security fundamentals.
• 2-3 years of relevant experience.
• Proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST Cyber Security, HITRUST, ISO 27701.
• Understanding GDPR, CCPA or other privacy laws.
• Governance and reporting skills.
• CIPM, CIPT, CIPP/E certifications are desirable.
• Excellent written and verbal communication.

Responsibilities

• Design and implement data protection and privacy programs for clients.
• Evaluate and assess clients' privacy practices with actionable recommendations.
• Demonstrate expertise in ISO standards to aid compliance and governance.
• Guide clients through GDPR and other privacy regulations.
• Prepare policies, reports and schedules for stakeholders.
• Conduct audits of privacy controls to measure effectiveness and compliance.
• Support incidents management and data subject rights processes.

Skills

InfoSec fundamentals

Governance & reporting

Cyber risk assessment

Regulatory compliance

Client communication

ISO standards

Education

CIPM

CIPT

CIPP/E

Job description

Job Description:

About Us

Tsaaro is dedicated to Data Privacy and Security as its core focus. Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions. Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints.

At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice. By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges.

Responsibilities

• Design and implement data protection and privacy programs that cater to our clients' specific business needs, ensuring their sensitive information is well safeguarded.
• Evaluate and assess our clients' data protection and privacy practices, offering valuable insights and actionable recommendations for continual improvement.
• Demonstrate expertise in various standards, such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc., to assist clients in compliance and governance.
• Provide guidance and support to clients in adhering to a complex web of national and international laws and regulations, including the EU General Data Protection Regulation (GDPR) and other privacy laws.
• Assist in preparing policies, reports, and schedules for clients and relevant stakeholders, ensuring clear communication and alignment with industry best practices.
• Conduct thorough audits of Privacy controls to monitor program effectiveness and compliance, ensuring data protection is at its optimal level.
• Utilize online tools to facilitate Incident Management and Data Subject Rights processes, ensuring efficient and timely responses to potential data incidents.
• Foster and maintain productive working relationships with client personnel, promoting effective collaboration and understanding of their specific needs.
• Demonstrate a strong commitment to adhering to workplace policies and procedures, maintaining the highest standards of professionalism and confidentiality.
• Contribute to cybersecurity engagements, developing cybersecurity strategies, governance, risk, and compliance activities, and cybersecurity policies in line with ISO 27001 and ISO 27701.
• Perform Gap Assessments, Risk Assessments, ISMS Documentation, Internal Audits, and support during Certification Audits to strengthen overall security frameworks.

Requirements

• Possess a sound knowledge of fundamentals of information security systems.
• Have 2-3 years of relevant experience in the field.
• Demonstrate proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc.
• Exhibit a good understanding of GDPR, CCPA, or other privacy laws.
• Display competence in governance and reporting, as well as a strong grasp of cyber and privacy risks.
• Hold relevant qualifications such as CIPM, CIPT, CIPP/E.
• Showcase excellent communication skills, both written and verbal.

Benefits

• Competitive salary and performance-based bonuses.
• Professional development opportunities, including training and certifications.
• Flexible working hours.
• Collaborative and inclusive work environment.
• Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.