Technical Lead - GDPR

Sopra Steria India; Chennai; Hybrid; INR 2,000,000 - 4,000,000; Full time

Job summary

Sopra Steria Group in India seeks an experienced Privacy/IT program manager to lead end-to-end GDPR and data privacy programs from Chennai/Bangalore, in a hybrid setup with UK shift alignment. You will partner with engineering and security teams to define roadmaps, track risks, and ensure DPIA, RoPA, and consent practices across enterprise systems.

The role requires 5–8+ years in leading technical programs, strong governance and stakeholder management, and familiarity with cloud security and

Qualifications

• Experience leading technical privacy or compliance programs.
• Strong governance, risk, dependency, and stakeholder management.
• Hands-on with GDPR programs and data protection tools.
• Familiarity with cloud, IAM, encryption, and data lifecycle.
• Experience in Agile/DevSecOps environments.

Responsibilities

• Lead end-to-end privacy programs including GDPR and RoPA.
• Manage roadmaps, timelines, milestones, risks and governance.
• Drive DPIA, DSAR, data retention and privacy controls.
• Collaborate with engineering to implement privacy by design.
• Support audits and privacy compliance assessments.
• Monitor KPIs and report to senior leadership.
• Manage third-party privacy risks and data protection requirements.
• Ensure privacy across SDLC and DevSecOps practices.

Skills

GDPR

Data privacy

Program mgmt

Stakeholder mgmt

Cloud security

Agile/Scrum

Jira/Confluence

Education

Bachelor's degree

Tools

Jira

Confluence

Azure DevOps

Microsoft Project

Job description

Company Description

About Sopra Steria Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion. The world is how we shape it.

Job Description

Experience Required: 06-08 years
Work Location: Chennai / Bangalore
Mode of work: Hybrid
Shift Timing: UK Shift

Key Responsibilities

1. Lead end-to-end technical programs focused on GDPR and data privacy.
2. Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
3. Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
4. Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
5. Support privacy incident response, audits, compliance assessments, and remediation.
6. Manage third-party/vendor privacy risks and data protection requirements.
7. Track program KPIs and provide regular updates to senior leadership.
8. Drive Privacy by Design and Privacy by Default across technology initiatives.

Must-Have Skills

1. Strong hands-on experience with UK GDPR and data privacy programs.
2. Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
3. Experience managing technical programs involving privacy, compliance, or data protection.
4. Strong stakeholder, risk, dependency, and governance management skills.
5. Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.
6. Experience working with Agile/Scrum and SDLC/DevSecOps environments.
7. Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.

Good to Have

1. Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
2. Experience with regulatory audits and third-party privacy assessments.

Qualifications

Required Qualifications

• Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field.
• 5-8+ years of experience in Leading the Technical Program or IT Program Management.
• 3+ years of experience delivering privacy or compliance programs.
• Experience working with engineering and security teams.
• Experience managing enterprise-scale technical programs.

Preferred Certifications

• Certified Information Privacy Manager (CIPM)
• Certified Information Privacy Professional - Europe (CIPP/E)
• Certified Information Privacy Technologist (CIPT)
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• Certified Information Systems Security Professional (CISSP)

Additional Information

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.