About the Role

- We are looking for an experienced Senior DPDPA GRC Consultant to support the execution and oversight of a large-scale Digital Personal Data Protection (DPDP) compliance program.
- The candidate will work closely with the Program Lead, Head of DPDPA, internal business teams, and external consulting partners to ensure successful gap assessment, remediation, and implementation.
- This role requires someone with practical DPDP experience, strong GRC fundamentals, and the ability to independently manage multiple compliance workstreams.
- The person must be able to understand assessment findings, identify missing areas, review implementation progress, guide stakeholders, and ensure deliverables are completed on time.

Key Responsibilities

- Coordinate and oversee day-to-day activities across multiple DPDPA workstreams.
- Review DPDP gap assessment findings, recommendations, and implementation deliverables prepared by external consulting partners.
- Validate department-wise data inventories, data flows, personal data processing activities, and assessment coverage.
- Identify missed requirements, incomplete assessments, compliance gaps, and implementation risks.
- Review remediation plans and track implementation progress against agreed timelines.
- Coordinate with IT, Legal, HR, Finance, Marketing, Operations, and other business functions.
- Work closely with external consulting partners to ensure delivery aligns with business priorities and DPDP requirements.
- Review activities related to consent management, privacy notices, Data Principal rights, grievance handling, data retention, vendor risk, and breach response.
- Track deliverables,



action owners, timelines, dependencies, risks, and closure evidence.
- Validate compliance evidence and follow up on incomplete or ineffective remediation.
- Guide internal teams on required actions and help resolve implementation blockers.
- Prepare management updates, compliance status reports, risk summaries, and escalation notes.
- Escalate critical risks, delays, and dependencies to the Head of DPDPA promptly.
- Support governance reviews, audit readiness, and overall program execution.

Mandatory Requirements

- Minimum 6 years of professional experience in GRC, information security compliance, risk management, privacy, or IT audit.
- Hands-on DPDP / DPDPA gap assessment, readiness assessment, or implementation experience is mandatory.
- Must have directly participated in at least one DPDP assessment or implementation engagement.
- Strong practical understanding of the DPDP Act, applicable rules, and compliance requirements.
- Experience reviewing data inventories, data flows, consent processes, privacy notices, vendor data handling, and remediation activities.
- Experience coordinating compliance projects involving multiple business departments.
- Ability to review consultant deliverables, identify gaps,



and challenge findings where necessary.
- Experience managing compliance trackers, risks, dependencies, deadlines, and evidence collection.
- Solid stakeholder management, analytical thinking, and communication skills.
- Ability to work independently with senior management and external partners.
- Must be based in Delhi NCR and available to work from the Delhi office.
- Must be available to join immediately or within 15 days.

Good to Have

- ISO 27001, SOC 2, GDPR, ISO 27701, or other privacy and information security compliance experience.
- Experience working with Big 4 consulting firms or large enterprise compliance programs.
- Experience in privacy impact assessments, vendor risk management, or IT security control reviews.
- Relevant GRC, privacy, or information security certifications.

Important: Please Read Before Applying

This position requires actual DPDP project experience, not just theoretical knowledge or certification.

Candidates with only general ISO 27001, SOC 2, audit documentation, or project coordination experience without practical DPDP exposure will not be considered.

Please apply only if you meet all three conditions:

1. Minimum 6 years of relevant GRC experience with hands-on DPDP assessment or implementation exposure.
2. Based in Delhi NCR and comfortable working full-time from the Delhi office.
3. Available to join immediately or within 15 days.

Shortlisted candidates will be expected to explain their actual DPDP project responsibilities, assessment activities, identified gaps, and implementation involvement during the interview.

📌 Senior DPDPA GRC Consultant (Delhi)
🏢 Cybernara
📍 Delhi