Description
Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.
Responsibilities
- Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
- Assess request validity, identity verification requirements, and applicable legal exemptions
- Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
- Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
- Draft and issue DSAR responses and maintain complete case documentation after review
- Handle escalations, complex cases, and requests submitted by authorized agents,
privacy brokers, or legal representatives
- Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
- Support audits, regulatory inquiries, and compliance reviews related to data subject rights
- Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
- Develop and maintain DSAR procedures, playbooks, and knowledge repositories
Qualifications
Bachelor�s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) preferred. 6 - 9 years of experience in Data Privacy or cybersecurity operations.
📌 Senior Specialist (Noida)
🏢 EXL
📍 Noida