Location: Thane, Maharashtra (on-site, full-time)
Education: Graduate in IT, Law, Commerce or related discipline
Industry context: Large enterprise, regulated setting
Key Responsibilities
Maintain data inventory, data flow maps and RoPA across business units and applications
Handle Data Principal rights requests (access, correction, erasure, grievance) within defined SLAs and maintain closure records
Support consent notice drafting, consent lifecycle tracking and withdrawal handling
Conduct privacy impact assessments for new projects, applications and processing changes
Review vendor and processor contracts for DPDP clauses; track third-party privacy obligations and periodic assessments
Support personal data breach identification, documentation and reporting within statutory timelines




Track data retention and deletion schedules; follow up with process owners on overdue items
Maintain privacy policies, SOPs, registers and audit evidence
Prepare periodic privacy metrics and management reporting
Assist in privacy awareness sessions and training records upkeep
Required Skills
Working knowledge of the DPDP Act 2023 and DPDP Rules, including Data Fiduciary and Significant Data Fiduciary obligations
Familiarity with ISO 27001 / ISO 27701 control environments
Strong documentation, evidence management and stakeholder follow-up skills
Proficient with Excel-based trackers and reporting
Preferred
Prior BFSI or insurance experience
Exposure to privacy management or GRC tooling
Awareness of GDPR for comparative context

📌 DPDP Analyst (Thane)
🏢 RethinkingWeb
📍 Thane