Technical Lead - GDPR

Soprasteria1; Chennai; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Sopra Steria in India is seeking a Privacy Program Manager to lead GDPR and data privacy programs. You will manage roadmaps, milestones, risks, and governance across engineering teams in a hybrid Chennai/Bangalore setup with UK shift alignment.

The ideal candidate has 5–8+ years in privacy or compliance programs, strong stakeholder management, and hands-on experience with data protection concepts (RoPA, DPIA, DSAR). CIPM/CIPP/E is a plus.

Qualifications

• Bachelor's degree in CS/IT/IS/Engineering or related field.
• 5–8+ years of experience leading the technical program or IT program management.
• 3+ years delivering privacy or compliance programs.
• Experience collaborating with engineering and security teams.
• Strong stakeholder, risk and governance management skills.

Responsibilities

• Lead end-to-end GDPR and data privacy programs.
• Manage program roadmaps, timelines, milestones, risks and governance.
• Drive data mapping, RoPA, DPIA, and DPIA compliance initiatives.
• Partner with engineering to implement privacy controls and data retention.
• Support privacy incidents, audits, and remediation activities.
• Track KPIs and report to senior leadership; manage third-party data risks.

Skills

UK GDPR and data privacy programs

Stakeholder, risk, dependency, and_gov

Agile/Scrum and SDLC/DevSecOps

Cloud platforms, IAM, encryption, DLP,

Data protection concepts (RoPA, DPIA,

Education

Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field

Tools

Jira

Confluence

Azure DevOps

Microsoft Project

Job description

About Sopra Steria

Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.

The world is how we shape it.

Experience Required: 06-08 years
Work Location: Chennai / Bangalore
Mode of work: Hybrid
Shift Timing: UK Shift

Key Responsibilities

1. Lead end-to-end technical programs focused on GDPR and data privacy.


2. Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.


3. Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.


4. Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.


5. Support privacy incident response, audits, compliance assessments, and remediation.


6. Manage third-party/vendor privacy risks and data protection requirements.


7. Track program KPIs and provide regular updates to senior leadership.


8. Drive Privacy by Design and Privacy by Default across technology initiatives.

Must-Have Skills

1. Strong hands-on experience with UK GDPR and data privacy programs.


2. Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.


3. Experience managing technical programs involving privacy, compliance, or data protection.


4. Strong stakeholder, risk, dependency, and governance management skills.


5. Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.


6. Experience working with Agile/Scrum and SDLC/DevSecOps environments.


7. Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.

Good to Have

1. Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.


2. Experience with regulatory audits and third-party privacy assessments.

Required Qualifications

• Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field.


• 5-8+ years of experience in Leading the Technical Program or IT Program Management.


• 3+ years of experience delivering privacy or compliance programs.


• Experience working with engineering and security teams.


• Experience managing enterprise-scale technical programs.

Preferred Certifications

• Certified Information Privacy Manager (CIPM)


• Certified Information Privacy Professional - Europe (CIPP/E)


• Certified Information Privacy Technologist (CIPT)


• ISO/IEC 27001 Lead Implementer or Lead Auditor


• Certified Information Systems Security Professional (CISSP)

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.