About Position:

We are seeking a Privacy Consultant with 3 to 5 years of experience in Data Privacy, Privacy Risk Management, and Regulatory Compliance. The ideal candidate will support the Data Privacy function by conducting Data Protection Impact Assessments (DPIAs), privacy risk assessments, and third-party privacy due diligence activities. This role requires robust knowledge of India's Digital Personal Data Protection Act (DPDP Act, 2023), GDPR principles, privacy governance frameworks, and risk management practices.

The candidate will work closely with Legal, Procurement, Information Security, Technology, and Business teams to identify, assess, and mitigate privacy risks while ensuring compliance with applicable regulations and organizational policies.

- Role: Privacy Consultant - Data Protection & Compliance
- Location: Mumbai
- Experience: 3 to 5 Years
- Job Type: Full-Time Employment

What You'll Do:

- Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, technology initiatives, business processes, and data processing activities.
- Assess privacy risks associated with technology deployments, digital transformation programs, data-sharing activities, and regulatory compliance initiatives.
- Perform third-party and vendor privacy due diligence assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
- Evaluate business and technology processes for compliance with the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, GDPR principles, and internal privacy policies.
- Review and assess data protection clauses, privacy provisions, and regulatory obligations within contracts and vendor agreements.
- Collaborate with Legal, Procurement, Information Security, Technology, and Business stakeholders to close identified compliance and privacy gaps.
- Track privacy risks, findings, recommendations, remediation actions, and evidence of closure through governance processes.
- Support privacy governance activities, risk reporting,



and management updates for the Data Protection Officer (DPO) and governance committees.
- Maintain privacy assessment repositories, compliance records, risk registers, and audit-ready documentation.
- Support implementation of privacy-by-design principles and privacy risk management controls across projects and operational activities.
- Assist in developing privacy standards, control frameworks, assessment templates, and compliance procedures.
- Participate in privacy awareness initiatives, policy reviews, and regulatory readiness programs.
- Support internal audits, compliance reviews, and privacy-related governance activities.
- Monitor regulatory developments and assist in evaluating their impact on organizational privacy programs.

Expertise You'll Bring:

- 3 to 5 years of experience in Data Privacy, Data Protection, Privacy Compliance, Risk Management, or Privacy Consulting roles.
- Hands-on experience conducting Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) from initiation through remediation tracking.
- Strong understanding of the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, and associated compliance requirements.
- Good knowledge of GDPR principles, privacy rights, consent management, lawful processing, and accountability requirements.
- Understanding of privacy governance frameworks, privacy risk assessment methodologies, and privacy management practices.
- Knowledge of ISO/IEC 27701 and privacy information management system concepts.
- Experience evaluating privacy controls across business, technology, and third-party ecosystems.
- Ability to review contracts, vendor agreements, and data processing arrangements from a privacy compliance perspective.




- Experience working with cross-functional stakeholders including Legal, Procurement, Information Security, Risk, Compliance, Technology, and Business teams.
- Strong privacy documentation, report writing, risk assessment, and analytical skills.
- Understanding of vendor risk management and third-party privacy assessment processes.
- Familiarity with privacy-by-design principles and privacy control implementation strategies.
- Strong communication, stakeholder management, and presentation skills.
- Excellent analytical thinking, attention to detail, and problem-solving capabilities.
- Ability to manage multiple assessments and deadlines in a fast-paced environment.

Benefits:

- Competitive salary and benefits package
- Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
- Opportunity to work with cutting-edge technologies
- Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
- Annual health check-ups
- Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

- We support hybrid work and flexible hours to fit diverse lifestyles.
- Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
- If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

📌 Privacy Consultant (Mumbai)
🏢 Persistent Systems
📍 Mumbai