Senior Data Protection Consultant

Tsaaro Solutions Pvt. Ltd.; Dadri; On-site; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Competitive salary

Bonuses based on performance

Training & Certifications

Collaborative environment

Job summary

Tsaaro Solutions Pvt. Ltd. is seeking a Senior Data Protection Consultant to lead data privacy programs and guidance for clients in compliance with global standards.

The role involves auditing privacy controls, advising on GDPR/CCPA compliance, and developing governance frameworks aligned with ISO 27001/27701. A strong communication ability and professional certifications are essential.

Qualifications

• Minimum 4 years of relevant experience in data protection and privacy.
• Strong understanding of GDPR, CCPA, and privacy laws.
• Proficiency in ISO 27001/2, ISO 22301, ISO 27018, NIST, HITRUST, ISO 27701.

Responsibilities

• Design and implement client data protection and privacy programs.
• Audit privacy controls and monitor program effectiveness.
• Advise on legal and regulatory compliance across jurisdictions.
• Develop policies, reports, and schedules for stakeholders.
• Lead incident management and data subject rights processes.
• Collaborate with clients to align with ISO 27001/27701.
• Support certifications audits and ISMS documentation.

Skills

Information security basics

Governance & reporting

Cyber risk management

Communication skills

Education

CIPM

CIPT

CIPP/E

Job description

Tsaaro’s prime focus is on Data Privacy and Security. Our team of specialist data privacy consultants, information security consultants, and penetration testers help and advise our clients to make running a secure business easier, with high efficiency. Everything we do is tailored to the individual organizational requirements, aligned with their budget and resource challenges. We take a pragmatic, risk-based approach to provide our clients with real-world, workable advice, guidance, and support that helps them to deal with a wide range of security and privacy-related challenges.

Responsibilities

As a Senior Data Protection Consultant, you will be entrusted with the following key responsibilities:

• Design and implement data protection and privacy programs that cater to our clients' specific business needs, ensuring their sensitive information is well safeguarded.
  
• Evaluate and assess our clients' data protection and privacy practices, offering valuable insights and actionable recommendations for continual improvement.
  
• Demonstrate expertise in various standards, such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc., to assist clients in compliance and governance.
  
• Provide guidance and support to clients in adhering to a complex web of national and international laws and regulations, including the EU General Data Protection Regulation (GDPR) and other privacy laws.
  
• Assist in preparing policies, reports, and schedules for clients and relevant stakeholders, ensuring clear communication and alignment with industry best practices.
  
• Conduct thorough audits of Privacy controls to monitor program effectiveness and compliance, ensuring data protection is at its optimal level.
  
• Utilize online tools to facilitate Incident Management and Data Subject Rights processes, ensuring efficient and timely responses to potential data incidents.
  
• Foster and maintain productive working relationships with client personnel, promoting effective collaboration and understanding of their specific needs.
  
• Demonstrate a strong commitment to adhering to workplace policies and procedures, maintaining the highest standards of professionalism and confidentiality.
  
• Contribute to cybersecurity engagements, developing cybersecurity strategies, governance, risk, and compliance activities, and cybersecurity policies in line with ISO 27001 and ISO 27701.
  
• Perform Gap Assessments, Risk Assessments, ISMS Documentation, Internal Audits, and support during Certification Audits to strengthen overall security frameworks.
  

Requirements

To be considered for this role, the candidate must meet the following requirements:

• Possess a sound knowledge of fundamentals of information security systems.
  
• Have 4+ years of relevant experience in the field.
  
• Demonstrate proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc.
  
• Exhibit a good understanding of GDPR, CCPA, or other privacy laws.
  
• Display competence in governance and reporting, as well as a strong grasp of cyber and privacy risks.
  
• Hold relevant qualifications such as CIPM, CIPT, CIPP/E.
  
• Showcase excellent communication skills, both written and verbal.
  
• Competitive salary and performance-based bonuses.
  
• Professional development opportunities, including training and certifications.
  
• Collaborative and inclusive work environment.
  
• Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.
  

Join and hustle with the India's fastest privacy and information security consulting company.