Senior specialist

EXL; Dadri; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

EXL is seeking an experienced professional to manage end-to-end DSAR operations from Dadri, India. You will ensure timely, accurate, and compliant fulfillment of individual rights requests while driving efficiency and quality.

Collaborate with Legal, IT, HR and Business teams to verify identity, assess exemptions, gather responsive data, and draft responses. Requires 6–9 years in Data Privacy or cybersecurity operations.

Qualifications

• Bachelor's degree required in a relevant field.
• 6-9 years of experience in Data Privacy or cybersecurity operations.
• Advanced certifications (e.g., CISSP, CISM, CEH) preferred.

Responsibilities

• Manage end-to-end DSAR processing across global privacy regulations.
• Assess request validity, identity verification requirements, and legal exemptions.
• Coordinate with Legal, IT, HR and Business teams to gather and review responsive data.
• Ensure compliance with GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other laws.
• Draft and issue DSAR responses and maintain documentation after review.
• Handle escalations and complex cases including authorized agents or legal representatives.
• Track DSAR volumes, SLAs, aging, and provide management reporting.
• Identify automation opportunities and maintain DSAR procedures and playbooks.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field

Job description

Job Description:

Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

Responsibilities

• Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
• Assess request validity, identity verification requirements, and applicable legal exemptions
• Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
• Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
• Draft and issue DSAR responses and maintain complete case documentation after review
• Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
• Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
• Support audits, regulatory inquiries, and compliance reviews related to data subject rights
• Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
• Develop and maintain DSAR procedures, playbooks, and knowledge repositories

Qualifications

Bachelor�s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) preferred. 6 - 9 years of experience in Data Privacy or cybersecurity operations