Required qualifications and experience
Bachelors degree in information technology, Computer Science, Engineering or a related field.
8 to 10 years of total experience in IT and information security, with at least 5 years in GRC, compliance or security consulting.
Led at least 1 - 2 end-to-end ISO 27001 implementations that achieved certification, with hands-on audit-readiness experience.
Working knowledge of ISO 22301 and ISO 27701, plus at least one of SOC 2, NIST CSF or HIPAA.
Practical experience with data privacy regulations, ideally DPDP Act 2023 and GDPR.
Hands-on familiarity with vulnerability management, VAPT and network security concepts.
Experience in client-facing consulting roles, including managing engagements or small project teams.

Key responsibilities Data Privacy Compliance & Execution
Assist in adhering to Privacy Acts across global geographies (GDPR, DPDPA, POPIA, CCPA, etc)
Review and update artefacts related to Privacy and Information Security for clients executing out of various geographies.
Should be able to conduct privacy training for internal stakeholders and freshers on regular intervals.
Coordinate with Senior Management for discussions and reviews of Privacy and Information Security implementations.




Should be able to drive discussions with Clients across the globe.
Should be able to translate regulatory requirements from global frameworks into concrete operational configurations, minimizing risk exposure while maximizing processing efficiency.
Operationalize Privacy Principles Implementations.
Lead and execute DPIA/PIA for high-risk data processing systems and dynamically maintain, and audit the Record of processing activities.
Discover, classify, and track data flows across all business verticals to establish crystal-transparent data inventory lineages.
Help in coordinating with privacy vendors in the implementation of DPDPA, by coordinating with stakeholders internally and driving as per the roadmap.

Qualified skills
Excellent verbal and written communication; confident in workshops and board-level presentations.
Stakeholder management across cultures and time zones.
Training and facilitation ability for awareness sessions and formal courses.
Structured, detail-oriented and able to manage several client engagements at once.
Willingness to travel for client assessments and audits as required.

📌 Hiring For Senior Senior Data Privacy And Grc Consultant Pune Wfo (India)
🏢 Nihilent
📍 India