Senior Privacy Analyst

Capillary Technologies; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Capillary Technologies in Bengaluru seeks a Privacy Analyst with 4+ years of experience to support our global privacy and data protection program. The role involves hands-on work with privacy regulations, data protection compliance, privacy operations, and vendor privacy assessments.

You will collaborate with legal, security, engineering, HR, and business teams to ensure compliance with GDPR, UK GDPR, DPDPA (India), CCPA/CPRA, and other global privacy regulations, fostering a privacy-by-design

Qualifications

• Education: any graduate in Science or technical diploma; master's preferred.
• Experience: 4+ years in privacy roles in SaaS environment.

Responsibilities

• Support the implementation and maintenance of the privacy program.
• Assist in ensuring compliance with GDPR, UK GDPR, DPDPA (India), CCPA/CPRA, and other global privacy regulations.
• Maintain Records of Processing Activities (RoPA) and data inventories.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Review DPAs, SCCs, and privacy questionnaires.
• Support third‑party privacy risk assessments and due diligence activities.
• Coordinate responses to data subject rights requests (DSARs).
• Assist in managing privacy incidents and breach notification assessments.
• Work with engineering and product teams to embed Privacy by Design and Privacy by Default.
• Support cross-border data transfer assessments and transfer mechanisms.
• Monitor changes in privacy regulations and update internal policies.

Skills

GDPR compliance

DPIA/PIA

RoPA management

DPAs & SCCs

Data lifecycle

Cross-border transfers

Cloud platforms

Privacy by design

Communication skills

Education

Graduate in Science

Technical diploma

Master's degree

Job description

Location: Bengaluru

Department: Information Security

Job Summary

We are looking for a Privacy Analyst with 4+ years of experience to support our global privacy and data protection program. The ideal candidate should have hands-on experience with privacy regulations, data protection compliance, privacy operations, and vendor privacy assessments. The role involves working closely with legal, security, engineering, HR, and business teams to ensure compliance with global privacy requirements and foster a privacy-by-design culture.

Qualifications

• Education: Any graduate in Science stream or a technical diploma holder. Masters will be an added advantage.
• Experience: 4 years of progressive experience in Privacy roles in SaaS based environment

Key Skills

• Good understanding of global privacy regulations including: GDPR, UK GDPR, India Digital Personal Data Protection Act (DPDPA), CCPA/CPRA
• Experience handling: RoPA, DPIA / PIA, DSR/DSAR management, Vendor privacy assessments, Data Processing Agreements (DPAs)
• Knowledge of data lifecycle management and cross-border data transfers.
• Familiarity with cloud environments (AWS, Azure, or GCP) and SaaS business models is preferred.
• Understanding of security controls aligned with ISO 27001, SOC 2, or similar frameworks.
• Excellent written and verbal communication skills.

Key Responsibilities

• Support the implementation and maintenance of the organization's privacy program.
• Assist in ensuring compliance with applicable privacy laws and regulations such as GDPR, UK GDPR, DPDPA (India), CCPA/CPRA, and other global privacy regulations.
• Maintain Records of Processing Activities (RoPA) and data inventories.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA) for new products, services, and business initiatives.
• Review customer and vendor privacy requirements, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and privacy questionnaires.
• Support third-party privacy risk assessments and due diligence activities.
• Coordinate responses to data subject rights requests (DSARs), including access, correction, deletion, and portability requests.
• Assist in managing privacy incidents and support breach notification assessments
• Work with engineering and product teams to embed Privacy by Design and Privacy by Default principles.
• Support cross-border data transfer assessments and applicable transfer mechanisms.
• Monitor changes in privacy regulations and assist in updating internal policies, procedures, and controls.
• Conduct privacy awareness sessions and employee training.
• Assist during customer audits and privacy-related certification assessments.