About Certinal Certinal is a unified Consent & Compliance Platform that replaces paper-based consent, manual intake, and uncontrolled forms with a single, fully digital system built for enterprise organizations. It digitally captures patient consent, enables legally binding electronic signatures, and ensures compliance with major regulations including HIPAA, 21 CFR Part 11, SOC 2 Type II, and CMS-0053-F, while integrating directly with EHR systems like Epic and Oracle Cerner. Position Overview: We are looking for a Privacy Consultant to assist with privacy, data protection, and regulatory compliance initiatives across Certinal. The role will involve working on Certinal's privacy consulting engagements, helping enterprise customers assess their privacy maturity, find compliance gaps and act on practical recommendations. The ideal candidate should be able to translate privacy regulations into practical business, operational, and technology requirements while working closely with Product, Engineering, Legal, Sales, Implementation, and customer teams.

Experience:
1-2 years

Key Responsibilities
• Conduct privacy gap assessments, Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and privacy risk assessments for enterprise customers.
• Facilitate stakeholder interviews, discovery sessions, and workshops to understand customers’ business processes, personal data flows, applications, and third-party integrations.
• Interpret applicable privacy regulations, including the India DPDP Act, GDPR, and CCPA/CPRA, map their requirements to customer processes and controls, and track regulatory developments that affect them.
• Identify privacy risks and compliance gaps, and recommend practical remediation measures and compliance roadmaps.
• Prepare Records of Processing Activities (RoPA), data maps, data flow diagrams, assessment reports, and risk registers, with findings supported by evidence.




• Support Sales and Pre-Sales teams with privacy questionnaires, RFPs, compliance discussions, and customer evaluations.
• Share insights from customer engagements with Product and Engineering teams to support Privacy by Design and Privacy by Default principles. Job Requirement Skills & Experience

Requirements:
• 1 to 2 years in data privacy, privacy consulting, data protection, regulatory compliance, risk management, legal compliance, GRC or a related field.
• A good understanding of privacy principles and data protection requirements.
• Working knowledge of the DPDP Act, 2023 and GDPR, and familiarity with CCPA/CPRA and other global privacy regulations.
• Exposure to PIAs, DPIAs, privacy audits, gap assessments, privacy risk assessments and compliance reviews.
• Understanding of data mapping, RoPA, data flow diagrams, privacy governance, consent management, lawful processing, Data Principal and data subject rights, purpose limitation, data minimisation, retention and third-party processing.
• The ability to analyse business processes and identify privacy risks.
• Robust research, analysis, problem-solving, documentation, report-writing and presentation skills.
• Clear written and spoken communication, and the ability to coordinate stakeholders across Legal, IT, information security and business teams. Preferred:
• A bachelor's or master's degree in Law, Technology, Information Security, Management or a related discipline.
• CIPP/E, CIPM, CIPT, DCPP or an equivalent certification.
• Exposure to ISO 27701, ISO 27001, SOC 2 or similar frameworks.
• Experience at a SaaS or enterprise software company, a Big 4 or specialist privacy consultancy, or in healthcare, including EMR or HIS environments and other regulated industries. Who we're looking for:
• The successful candidate should be able to interpret regulation, advise customers and leadership, conduct detailed privacy assessments, and work closely with technical teams to translate privacy requirements into practical solutions.

📌 Privacy Consultant (Bengaluru)
🏢 Certinal
📍 Bengaluru