Senior Data Protection Consultant

Dutient; Dadri; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Dutient is seeking a Senior Consultant to join its Privacy Consulting practice. You will translate DPDP Act 2023, IT Act and global GDPR/CCPA concepts into engineering-friendly actions.

You will run privacy assessments, RoPA, DPIs, and vendor DPAs, ensuring privacy requirements are actually implemented in systems and processes. You will collaborate with product, IT, Legal, HR and procurement teams to drive compliance, develop policies, and support audits and regulatory reviews.

Qualifications

• Strong knowledge of the DPDP Act, 2023 and applicable DPDP Rules.
• Hands-on privacy compliance implementation and consulting.
• Experience with RoPA, DFDs, DPIAs, consent management, data principal rights and third-party privacy risk management.
• Excellent project management, coordination, documentation and communication skills.
• Bachelor’s or master’s degree in IT, Cybersecurity, Law, Management, or related field.

Responsibilities

• Lead the overall DPDP implementation roadmap, project plan, timelines and deliverables.
• Conduct privacy gap assessments and track remediation across business entities.
• Lead data mapping, RoPA, DFDs and DPIAs.
• Develop privacy policies, consent management, data principal rights and breach processes.
• Coordinate with IT, Legal, HR, Procurement, Marketing to drive compliance.
• Manage third-party privacy assessments and DPAs.
• Evaluate privacy tools and automation solutions.
• Conduct privacy awareness and training programs and support audits.

Skills

DPDP Act knowledge

Privacy consulting

Project management

Stakeholder coordination

ISO 27701 / GDPR familiarity

Communication skills

Education

Bachelor's/Master's in IT/Cybersecurity/Law

Privacy certifications (CIPP/A, CIPM, CDPSE)

Law degree (LLB/LLM)

Tools

RoPA

Data Flow Diagrams (DFDs)

DPIAs

Consent management

Job description

Immediate Joiners or candidates serving a notice period of up to 15 days will be preferred.

About the Role

We are looking for a Senior Consultant to join our growing Privacy Consulting practice. You will turn the Digital Personal Data Protection Act (DPDPA), the IT Act and global frameworks such as GDPR and CCPA/CPRA into practical, engineering-friendly action. You will run privacy assessments, build RoPAs and data inventories, conduct DPIAs, shape data privacy agreements and Data Fiduciary to Data Processor arrangements, and work with product and technology teams to make sure privacy requirements are actually implemented in systems and processes, not just documented

Key Responsibilities

• Lead the overall DPDP implementation roadmap, project plan, timelines, milestones and deliverables.
• Conduct privacy gap assessments and track remediation across business entities and functions.
• Lead personal data mapping, Data Flow Diagrams (DFDs), Records of Processing Activities (RoPA) and Data Protection Impact Assessments (DPIAs).
• Develop and implement privacy policies, procedures, consent management, data principal rights, grievance handling and breach management processes.
• Coordinate with IT, Information Security, Legal, HR, Procurement, Marketing and business teams to drive compliance.
• Manage third-party privacy assessments, vendor DPAs, contractual requirements and privacy risks.
• Evaluate and coordinate implementation of privacy management tools and automation solutions.
• Conduct privacy awareness and training programs and support audits and regulatory compliance reviews.
• Prepare management dashboards, progress reports, risk registers and periodic updates for senior leadership.

Required Skills and Experience

• Strong working knowledge of the DPDP Act, 2023 and applicable DPDP Rules.
• Hands-on experience in end-to-end privacy compliance implementation and consulting.
• Practical knowledge of RoPA, DFDs, DPIAs, consent management, data principal rights and third-party privacy risk management.
• Strong project management, stakeholder coordination, documentation and communication skills.
• Bachelor's or master's degree in IT, Cybersecurity, Law, Management, or a related field.
• Privacy certifications such as CIPP/A, CIPM, CDPSE, or DSCI privacy certifications are preferred.
• Knowledge of ISO 27701, ISO 27001 and GDPR is an added advantage.

Preferred Qualifications

• Bachelor's degree in Law, Computer Science, Information Security, Engineering, or a related discipline.
• LLB/LLM, B.Tech, B.E., MCA, or equivalent qualifications are preferred.
• Candidates with a background in Privacy, Cybersecurity, Risk, or Compliance Consulting will be given preference.