Location: Thane, Maharashtra (on-site, full-time)

Education: Graduate in IT, Law, Commerce or related discipline

Industry context: Large enterprise, regulated environment

Key Responsibilities

Maintain data inventory, data flow maps and RoPA across business units and applications

Handle Data Principal rights requests (access, correction, erasure, grievance) within defined SLAs and maintain closure records

Support consent notice drafting, consent lifecycle tracking and withdrawal handling

Conduct privacy impact assessments for recent projects, applications and processing changes

Review vendor and processor contracts for DPDP clauses; track third-party privacy obligations and periodic assessments

Support personal data breach identification, documentation and reporting within statutory timelines





Track data retention and deletion schedules; follow up with process owners on overdue items

Maintain privacy policies, SOPs, registers and audit evidence

Prepare periodic privacy metrics and management reporting

Assist in privacy awareness sessions and training records upkeep

Required Skills

Working knowledge of the DPDP Act 2023 and DPDP Rules, including Data Fiduciary and Significant Data Fiduciary obligations

Familiarity with ISO 27001 / ISO 27701 control environments

Strong documentation, evidence management and stakeholder follow-up skills

Proficient with Excel-based trackers and reporting

Preferred

Prior BFSI or insurance experience

Exposure to privacy management or GRC tooling

Awareness of GDPR for comparative context

📌 DPDP Analyst (Thane)
🏢 RethinkingWeb
📍 Thane