Job Description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 18 of the Fortune 50 companies, 7 of the 10 top US banks, 9 of the 10 technology companies, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 26 sequential quarters of growth with $487.6M in Q4 FY26 revenue, up 7.8% Q-o-Q and 20.0% Y-o-Y. Our 29,500+ global team members, located in 21 countries, have been instrumental in helping the market leaders transform their industries. We received five awards at the ISG (Information Services Group) Provider Lens Awards 2026 and, for the second year in a row, were awarded the Growth Honor of the Year at the Everest Group Elevate 2026.

About Position:

We are seeking a Privacy Consultant with 3 to 5 years of experience in Data Privacy, Privacy Risk Management, and Regulatory Compliance. The ideal candidate will support the Data Privacy function by conducting Data Protection Impact Assessments (DPIAs), privacy risk assessments, and third-party privacy due diligence activities. This role requires strong knowledge of India's Digital Personal Data Protection Act (DPDP Act, 2023), GDPR principles, privacy governance frameworks, and risk management practices. The candidate will work closely with Legal, Procurement, Information Security, Technology, and Business teams to identify, assess, and mitigate privacy risks while ensuring compliance with applicable regulations and organizational policies.

- Role: Privacy Consultant - Data Protection & Compliance
- Location: Mumbai
- Experience: 3 to 5 Years
- Job Type: Full-Time Employment

What You'll Do:

- Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for recent products, technology initiatives, business processes, and data processing activities.
- Assess privacy risks associated with technology deployments, digital transformation programs, data-sharing activities, and regulatory compliance initiatives.
- Perform third-party and vendor privacy due diligence assessments,



including reviews of processors, service providers, sub-processors, and digital lending partners.
- Evaluate business and technology processes for compliance with the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, GDPR principles, and internal privacy policies.
- Review and assess data protection clauses, privacy provisions, and regulatory obligations within contracts and vendor agreements.
- Collaborate with Legal, Procurement, Information Security, Technology, and Business stakeholders to close identified compliance and privacy gaps.
- Track privacy risks, findings, recommendations, remediation actions, and evidence of closure through governance processes.
- Support privacy governance activities, risk reporting, and management updates for the Data Protection Officer (DPO) and governance committees.
- Maintain privacy assessment repositories, compliance records, risk registers, and audit-ready documentation.
- Support implementation of privacy-by-design principles and privacy risk management controls across projects and operational activities.
- Assist in developing privacy standards, control frameworks, assessment templates, and compliance procedures.
- Participate in privacy awareness initiatives, policy reviews, and regulatory readiness programs.
- Support internal audits, compliance reviews, and privacy-related governance activities.
- Monitor regulatory developments and assist in evaluating their impact on organizational privacy programs.

Expertise You'll Bring:

- 3 to 5 years of experience in Data Privacy, Data Protection, Privacy Compliance, Risk Management, or Privacy Consulting roles.
- Hands-on experience conducting Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) from initiation through remediation tracking.
- Strong understanding of the Digital Personal Data Protection Act (DPDP Act 2023), DPDP Rules, and associated compliance requirements.
- Good knowledge of GDPR principles, privacy rights, consent management, lawful processing, and accountability requirements.
- Understanding of privacy governance frameworks, privacy risk assessment methodologies, and privacy management practices.
- Knowledge of ISO/IEC 27701 and privacy information management system concepts.




- Experience evaluating privacy controls across business, technology, and third-party ecosystems.
- Ability to review contracts, vendor agreements, and data processing arrangements from a privacy compliance perspective.
- Experience working with cross-functional stakeholders including Legal, Procurement, Information Security, Risk, Compliance, Technology, and Business teams.
- Strong privacy documentation, report writing, risk assessment, and analytical skills.
- Understanding of vendor risk management and third-party privacy assessment processes.
- Familiarity with privacy-by-design principles and privacy control implementation strategies.
- Robust communication, stakeholder management, and presentation skills.
- Excellent analytical thinking, attention to detail, and problem-solving capabilities.
- Ability to manage multiple assessments and deadlines in a fast-paced workplace.

Benefits:

- Competitive salary and benefits package
- Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
- Opportunity to work with cutting-edge technologies
- Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
- Annual health check-ups
- Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

- We support hybrid work and flexible hours to fit diverse lifestyles.
- Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
- If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

1

Open Positions

Data Privacy Laws Compliance,Data Privacy

Skills Required

Mumbai

Location

Data Privacy Laws Compliance,Data Privacy,Communication Skills,Soft Skills & Leadership,Analytical Skill,Analytical and logical thinking,Analyze/Interpret Measures,Metrics and Data,Networking Skills

Desirable Skills

190825

Job Code

📌 Privacy Consultant (Mumbai)
🏢 Persistent
📍 Mumbai