About EfSecure

EfSecure sits where technology meets law. We help organisations build and run their data privacy and information security programmes β€” DPDP compliance, info-sec policies, techno-legal consultancy, trainings and incident response β€” backed by PrivyComply, our DPDP compliance platform.

The role

You will work alongside our techno-legal team on live client engagements: assessing where personal data sits, what the law requires, and what has to change in systems and processes to close the gap. This is not a pure legal role or a pure technical role. You will be translating between the two every day.

What you'll do

- Run privacy gap assessments, data discovery and data mapping exercises across client environments
- Draft and review privacy notices, consent language, internal policies and data processing agreements
- Advise on DPDP Act and GDPR obligations β€” consent, data principal rights, retention, cross-border transfer, breach notification
- Embed Privacy by Design into client product and engineering workflows, reviewing new features and systems before launch




- Support client onboarding onto PrivyComply and help operationalise records of processing, DSR handling and breach readiness
- Assist with vendor due diligence, third-party risk reviews and employee awareness trainings
- Track regulatory developments and turn them into practical guidance for clients

What we're looking for

- 1–5 years in data privacy, technology law, GRC, or IT compliance
- Working knowledge of the DPDP Act, 2023 and GDPR
- Sound IT know-how β€” you can hold a conversation with an engineering team about databases, APIs, logs and access controls
- Familiarity with data privacy frameworks and Privacy by Design principles
- Clear written English; you will be drafting documents clients act on
- Law degree, or a technical degree with demonstrable privacy exposure β€” we care more about the combination than the label

Nice to have

- CIPP/E, CIPM, CIPT, DCPP or ISO 27001 LA certification
- Exposure to cybersecurity or fraud incident response
- Client-facing consulting experience

Details Location: Pune (in office)

Experience: 1–5 years

📌 Privacy & Compliance Analyst (India)
🏢 EfSecure
📍 India