SENIOR TECHNICAL LEAD - Data Governance

Happiest Minds Technologies; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Happiest Minds Technologies is seeking an experienced Information Security, Privacy & Compliance professional to lead DPDPA compliance efforts, ISO 27001:2022 implementation, and CERT-In alignment from Bengaluru. The role demands strong governance, risk management, and audit readiness across stakeholders in legal, technology, privacy, and business units.

The candidate will drive privacy policy development, PIAs/DPIAs, data subject rights processes, incident response coordination, and security

Qualifications

• Strong experience in DPDPA compliance and privacy governance.

Responsibilities

• Lead DPDPA compliance assessments, gap analyses, and remediation.
• Support the Data Protection Officer (DPO) in privacy governance activities.
• Develop and review privacy policies, consent notices, privacy notices, data retention schedules, and data processing procedures.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Define and track privacy compliance metrics and reporting.
• Support implementation of consent management and data subject rights processes.
• Manage personal data breach assessment and notification activities.
• Lead ISO 27001 implementation, maintenance, and continual improvement activities.
• Conduct ISMS risk assessments and risk treatment planning.
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Coordinate internal audits, management reviews, and certification audits.
• Monitor compliance with ISO 27001 controls and organizational requirements.
• Drive corrective actions and closure of audit observations.
• Ensure compliance with CERT-In directions and reporting requirements.
• Support security incident management and cyber incident reporting.
• Coordinate with SOC, IT, and business teams during security incidents.
• Establish and maintain incident response procedures and evidence management processes.
• Support cyber crisis and incident response exercises.
• Conduct CIS Controls maturity assessments and gap assessments.
• Develop remediation roadmaps aligned with CIS Controls v8.
• Track implementation status and risk reduction initiatives.
• Coordinate vulnerability management, configuration reviews, and control effectiveness assessments.
• Prepare executive dashboards and security maturity reports.
• Perform risk assessments and compliance reviews.
• Maintain risk registers, treatment plans, and compliance trackers.
• Support third-party risk management assessments.
• Drive awareness programs and security training initiatives.
• Prepare reports and presentations for senior management and audit committees.

Skills

DPDPA compliance

Privacy governance

ISO 27001:2022

CERT-In compliance

CIS Controls

GRC

Risk management

Stakeholder management

Audit management

Incident response

Policy development

Documentation & reporting

Education

Bachelor's degree in Engineering / CS / IT

Master's degree or security certifications preferred

Job description

Note: Looking for Immediate Joiners only

Senior Consultant / Lead Consultant - DPDPA, ISO 27001, CERT-In & CIS

Job Title

Senior Consultant / Lead Consultant - Information Security, Privacy & Compliance.

Location

Bangalore / Onsite

Shift Timings: Monday to Friday 9am to 5pm (5 Days work from office)

Job Summary

We are seeking an experienced Information Security and Privacy professional to support and lead compliance, governance, risk management, and security assurance initiatives. The candidate will be responsible for driving Digital Personal Data Protection Act (DPDPA) compliance, ISO 27001:2022 implementation and audit readiness, CERT-In compliance requirements, CIS security assessments, risk management programs, and security governance activities across the organization.

The role requires strong stakeholder management skills and the ability to work closely with leadership teams, legal, technology, privacy, audit, and business stakeholders.

Key Responsibilities

DPDPA & Privacy Compliance

• Lead DPDPA compliance assessments, gap analyses, and remediation programs.
• Support the Data Protection Officer (DPO) in privacy governance activities.
• Develop and review privacy policies, consent notices, privacy notices, data retention schedules, and data processing procedures.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Define and track privacy compliance metrics and reporting.
• Support implementation of consent management and data subject rights processes.
• Manage personal data breach assessment and notification activities.

ISO 27001:2022

• Lead ISO 27001 implementation, maintenance, and continual improvement activities.
• Conduct ISMS risk assessments and risk treatment planning.
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Coordinate internal audits, management reviews, and certification audits.
• Monitor compliance with ISO 27001 controls and organizational requirements.
• Drive corrective actions and closure of audit observations.

CERT-In Compliance

• Ensure compliance with applicable CERT-In directions and reporting requirements.
• Support security incident management and cyber incident reporting.
• Coordinate with SOC, IT, and business teams during security incidents.
• Establish and maintain incident response procedures and evidence management processes.
• Support cyber crisis and incident response exercises.

CIS Controls & Security Assessments

• Conduct CIS Controls maturity assessments and gap assessments.
• Develop remediation roadmaps aligned with CIS Controls v8.
• Track implementation status and risk reduction initiatives.
• Coordinate vulnerability management, configuration reviews, and control effectiveness assessments.
• Prepare executive dashboards and security maturity reports.

Governance, Risk & Compliance (GRC)

• Perform risk assessments and compliance reviews.
• Maintain risk registers, treatment plans, and compliance trackers.
• Support third-party risk management assessments.
• Drive awareness programs and security training initiatives.
• Prepare reports and presentations for senior management and audit committees.

Required Skills

Mandatory

• Strong experience in DPDPA compliance and privacy governance.
• Hands-on experience with ISO 27001:2022 implementation and audits.
• Experience in CERT-In compliance and incident management processes.
• Experience conducting CIS Controls assessments and security gap assessments.
• Knowledge of risk management frameworks and security governance.
• Experience drafting security, privacy, and compliance policies.
• Strong documentation, reporting, and communication skills.
• Experience interacting with auditors, regulators, and senior management.

Preferred Certifications

• ISO 27001 Lead Implementer and/or Lead Auditor.
• CDPSE, CIPP, CIPM, or equivalent privacy certifications.
• CISSP, CISA, CRISC, or CEH.
• DPDPA-related certification or privacy training.
• ISO 27701 Lead Implementer (preferred).

Education

• Bachelor's degree in engineering, Computer Science, Information Technology, Cyber Security, or related discipline.
• Master's degree or relevant security/privacy certifications preferred.

Key Competencies

• Stakeholder Management
• Leadership & Team Coordination
• Risk-Based Decision Making
• Policy Development
• Audit Management
• Incident Response Coordination
• Analytical & Problem-Solving Skills
• Executive Communication & Reporting

Desired Certifications

• ISO/IEC 27001:2022 Lead Auditor
• ISO/IEC 27001:2022 Lead Implementer
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)