Technical Lead - Data Privacy & GDPR Compliance

Sopra Steria India Limited; Chennai; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Sopra Steria India Limited is seeking a Technical Lead to drive GDPR and data privacy initiatives across hybrid Chennai/Bangalore environments. You will lead end-to-end programs, coordinating with engineering, security, and legal teams to ensure compliance and risk management.

The role requires 5–8+ years in IT program management with strong privacy capabilities, and familiarity with agile/Scrum and DevSecOps processes. Prior experience with cloud security and privacy controls is preferred.

Qualifications

• Bachelor's degree in computer science, information technology, information systems, engineering, or related field.
• 5–8+ years leading technical programs or IT program management.
• 3+ years delivering privacy or compliance programs.
• Experience with engineering and security teams.
• Exposure to enterprise-scale technical programs.

Responsibilities

• Lead end-to-end privacy programs including GDPR and data protection.
• Manage program roadmaps, timelines, milestones, risks and governance.
• Drive data mapping, data flow analysis, RoPA and DPIA.
• Implement data retention, deletion, consent, DSAR, and data minimization controls.
• Support privacy audits, assessments and remediation.
• Manage third-party privacy risks and data protection requirements.
• Track KPIs and report to senior leadership.
• Promote Privacy by Design and Privacy by Default across tech initiatives.

Skills

UK GDPR

Data privacy

DPIA/RoPA/DSAR

Privacy by Design

Agile/Scrum

Jira/Confluence

Cloud security

Education

Bachelor's degree in CS/IT/Engineering

Tools

CIPM

CIPP/E

CIPT

ISO27001 Lead Implementer/Auditor

CISSP

Job description

Technical Lead Company Description About Sopra Steria Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion. The world is how we shape it.

Job Description

Experience Required: 06-08 years

Work Location: Chennai / Bangalore

Mode of work: Hybrid

Shift Timing: UK Shift

Key Responsibilities

• Lead end-to-end technical programs focused on GDPR and data privacy.
• Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
• Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
• Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
• Support privacy incident response, audits, compliance assessments, and remediation.
• Manage third-party/vendor privacy risks and data protection requirements.
• Track program KPIs and provide regular updates to senior leadership.
• Drive Privacy by Design and Privacy by Default across technology initiatives.

Must-Have Skills

Strong hands-on experience with UK GDPR and data privacy programs.

Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.

Experience managing technical programs involving privacy, compliance, or data protection.

Strong stakeholder, risk, dependency, and governance management skills.

Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.

Experience working with Agile/Scrum and SDLC/DevSecOps environments.

Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.

Good to Have

Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.

Experience with regulatory audits and third-party privacy assessments.

Required Qualifications

• * Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field.
• * 5–8+ years of experience in Leading the Technical Program or IT Program Management.
• * 3+ years of experience delivering privacy or compliance programs.
• * Experience working with engineering and security teams.
• * Experience managing enterprise-scale technical programs.

Preferred Certifications

• * Certified Information Privacy Manager (CIPM)
• * Certified Information Privacy Professional – Europe (CIPP/E)
• * Certified Information Privacy Technologist (CIPT)
• * ISO/IEC 27001 Lead Implementer or Lead Auditor
• * Certified Information Systems Security Professional (CISSP)

Additional Information At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences. All of our positions are open to people with disabilities.

Experience Level Senior Level