Technical Lead - Data Privacy and GDPR Compliance

Sopra Steria India Limited; Chennai; Hybrid; INR 2,500,000 - 3,800,000; Full time

Benefits offered by this job

Job summary

Sopra Steria India Limited seeks a Technical Lead - GDPR to drive GDPR and data privacy programs from Chennai/Bangalore in a hybrid setup with UK shift. You will lead data mapping, RoPA, DPIA, and privacy controls, partnering with engineering and security teams.

The role requires 6–8+ years in leading technical programs, deep UK GDPR knowledge, and strong governance and stakeholder skills. Certifications like CIPM/CIPP/E are preferred.

Qualifications

• Lead and deliver GDPR and data privacy programs.
• Strong knowledge of UK GDPR, DPIA, RoPA, DSAR, consent.
• Experience coordinating with engineering and security teams.
• Governance, risk, dependency, and stakeholder management.

Responsibilities

• Lead end-to-end GDPR and data privacy programs.
• Manage roadmaps, timelines, milestones, risks, and governance.
• Drive data mapping, RoPA, DPIA, and GDPR compliance initiatives.
• Collaborate with engineering to implement privacy controls.
• Support privacy audits, incidents, assessments, and remediation.
• Manage third-party privacy risks and data protection requirements.
• Track program KPIs and report to senior leadership.
• Drive Privacy by Design and Privacy by Default across initiatives.

Skills

UK GDPR

Data privacy

DPIA

RoPA

DSAR

Data retention

Data minimization

Governance

Agile/Scrum

SDLC/DevSecOps

Stakeholder management

Education

Bachelor's degree in Computer Science / IT / IS / Engineering

Tools

Jira

Confluence

Azure DevOps

Microsoft Project

Job description

Technical Lead - GDPR

Company Description About Sopra Steria Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion. The world is how we shape it.

Job Description

Experience Required: 06-08 years

Work Location: Chennai / Bangalore

Mode of work: Hybrid

Shift Timing: UK Shift

Key Responsibilities

• Lead end-to-end technical programs focused on GDPR and data privacy.
• Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
• Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
• Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
• Support privacy incident response, audits, compliance assessments, and remediation.
• Manage third-party/vendor privacy risks and data protection requirements.
• Track program KPIs and provide regular updates to senior leadership.
• Drive Privacy by Design and Privacy by Default across technology initiatives.

Must-Have Skills

• Strong hands-on experience with UK GDPR and data privacy programs.
• Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
• Experience managing technical programs involving privacy, compliance, or data protection.
• Strong stakeholder, risk, dependency, and governance management skills.
• Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.
• Experience working with Agile/Scrum and SDLC/DevSecOps environments.
• Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.

Good to Have

• Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
• Experience with regulatory audits and third-party privacy assessments.

Qualifications

Required Qualifications

• Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field.
• 5–8+ years of experience in Leading the Technical Program or IT Program Management.
• 3+ years of experience delivering privacy or compliance programs.
• Experience working with engineering and security teams.
• Experience managing enterprise-scale technical programs.

Preferred Certifications

• Certified Information Privacy Manager (CIPM)
• Certified Information Privacy Professional – Europe (CIPP/E)
• Certified Information Privacy Technologist (CIPT)
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• Certified Information Systems Security Professional (CISSP)

Additional Information

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences. All of our positions are open to people with disabilities.

Experience Level

Senior Level