Job Title: Privacy Consultant

Location:
Bengaluru

Experience:
2 to 4 Years Department: Advisory

About Us
AuthenticOne is a CERT-In empanelled and CREST Accredited Cybersecurity solutions and services company with expertise in consulting, advisory and risk management. AuthenticOne specializes in Comprehensive Compliance Management, Vulnerability Assessment, Penetration Testing, and Managed Security Services. Our expert team ensures that clients' businesses meet all regulatory requirements, identify and mitigate potential vulnerabilities, and maintain robust, continuous protection against evolving cyber threats. Position Summary: We’re building one of India’s leading privacy practices. Come build it with us. As a Privacy Consultant, you will help clients across BFSI, healthcare, SaaS/technology, and manufacturing comply with DPDPA, GDPR, and other privacy regulations
- from assessing data practices and closing gaps to building privacy programs aligned with their security and GRC frameworks. A client-facing role with real ownership and room to grow.

Key Responsibilities
• Privacy Assessments: Lead data discovery and mapping exercises, maintain RoPA, and conduct DPIAs, privacy gap assessments, and audits for client organisations.
• Regulatory Advisory: Interpret DPDPA, DPDP Rules, GDPR, and other applicable laws, and translate them into clear, practical actions for clients.
• Regulatory Tracking: Keep clients ahead of new rules, regulator guidance, and enforcement trends, and adjust their compliance roadmaps as requirements evolve.
• Privacy Program Implementation: Help clients design and roll out privacy policies, notices, consent processes, retention schedules, and governance structures.
• Rights & Breach Management:



Set up processes for handling data principal requests and support clients in preparing for and responding to personal data breaches.
• Vendor Privacy Risk: Assess processors and third parties, review data processing agreements, and advise on cross-border data transfers.
• GRC Integration: Align privacy controls with ISO 27001, ISO 27701, and sector requirements such as RBI and SEBI guidelines.
• Stakeholder Collaboration: Work with client Legal, IT, Security, Product, and business teams to embed privacy into everyday operations.
• Reporting & Delivery: Prepare assessment reports, presentations, and documentation, and support end-to-end project delivery.

Qualifications:
• Bachelor's degree in Information Technology, Cybersecurity or a related field (or equivalent experience).
• 2 to 4 years of hands-on experience in data privacy, privacy consulting, or GRC roles with a privacy focus.
• Good working knowledge of DPDPA and GDPR; exposure to CCPA/CPRA, PDPL, or other global privacy laws is a plus.
• Has delivered at least one end-to-end privacy assessment or DPDPA/GDPR readiness engagement.
• Familiarity with how privacy controls map to ISO 27001, ISO 27701, and sector regulations such as RBI and SEBI.
• Solid analytical, documentation, and client-facing communication skills.
• Ability to handle multiple engagements and deliverables independently is a plus.
• Certifications such as CIPP/E, CIPM, DSCI DCPP, or ISO 27701 Lead Implementer/Auditor are preferred. Why Join Us
• Be part of a young, passionate cybersecurity company making a real impact.
• Work directly with leadership and sales experts and quick-track your learning.
• Sell with a modern, automation-first sales stack, backed by a rare CERT-In + CREST dual accreditation.
• A culture built on Simplicity, Excellence, Trust and Customer Centricity.

📌 Privacy Consultant (Bengaluru)
🏢 AuthenticOne
📍 Bengaluru