Description

Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

Responsibilities
Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
Assess request validity, identity verification requirements, and applicable legal exemptions
Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
Draft and issue DSAR responses and maintain complete case documentation after review
Handle escalations, complex cases, and requests submitted by authorized agents,



privacy brokers, or legal representatives
Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
Support audits, regulatory inquiries, and compliance reviews related to data subject rights
Identify prospects for automation and process improvements to enhance DSAR efficiency and quality
Develop and maintain DSAR procedures, playbooks, and knowledge repositories

Qualifications

Bachelor�s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) preferred. 6 - 9 years of experience in Data Privacy or cybersecurity operations.

📌 Senior Specialist Noida (India)
🏢 EXL
📍 India