Job Description

Job Title: Privacy Specialist

Experience: 3–8 years

Role Overview

The Privacy Specialist is responsible for supporting and strengthening the organization’s privacy and personal data protection program, with strong working knowledge of India’s Digital Personal Data Protection (DPDP) Act and applicable rules. The role focuses on privacy compliance, data handling practices, risk assessments, documentation, individual rights requests, and coordination with business and technical teams. Experience with the EU General Data Protection Regulation (GDPR) is an added advantage.

Key Responsibilities

DPDP Compliance & Privacy Governance

- Maintain and support the organization’s privacy program in alignment with India’s DPDP Act and applicable rules and guidance

- Translate privacy obligations into practical policies, procedures, workflows, and controls for relevant business functions

- Support privacy governance activities, maintain compliance registers, and track implementation of privacy requirements

- Monitor changes in privacy laws, rules, and regulatory guidance and assess their potential impact on organizational practices

Personal Data Lifecycle & Data Principal Rights

- Support data mapping and records of personal data processing, including collection, use, sharing, retention, and deletion

- Help establish and maintain processes for handling data principal requests, grievances, consent withdrawal, and related communications, as applicable

- Review privacy notices, consent language, and data collection forms to help ensure transparency and appropriate purpose limitation

- Coordinate with business and technical teams to support retention schedules, deletion processes, and appropriate handling of personal data

Privacy Risk Assessments & Incident Management

- Conduct or coordinate privacy impact and risk assessments for new projects, products, vendors, and changes to personal data processing

- Identify privacy risks and recommend proportionate controls and remediation actions in collaboration with relevant teams

- Support the identification, assessment, escalation,



and documentation of personal data breaches and privacy incidents

- Coordinate with Security, Legal, IT, and business stakeholders on incident response, required assessments, and applicable notification obligations

Third-Party Privacy & GDPR (Added Advantage)

- Review vendor and partner privacy practices, contractual clauses, and data-processing arrangements with relevant stakeholders

- Support privacy due diligence and track remediation of issues identified during vendor reviews or assessments

- Where applicable, assist with GDPR-related activities such as data subject rights, lawful bases, records of processing, and cross-border transfer reviews

- Help map privacy requirements across jurisdictions and identify common controls while accounting for jurisdiction-specific obligations

Documentation, Training & Stakeholder Management

- Maintain privacy policies, procedures, notices, assessment records, processing registers, and evidence of compliance

- Prepare privacy compliance updates, risk summaries, metrics, and reports for management and internal stakeholders

- Deliver or coordinate privacy awareness sessions and provide practical guidance to teams handling personal data

Required Skills & Experience

- 3–5 years of experience in data privacy, privacy compliance, information security GRC, legal compliance, or a related role

- Solid, demonstrable knowledge of India’s DPDP Act and applicable rules, including key obligations relating to notice, consent where applicable, data principal rights, safeguards, breach response, and accountability

- Experience with privacy documentation, data mapping, risk assessments, compliance reviews, and coordination with cross-functional stakeholders





Preferred Qualifications

- Bachelor’s degree in Law, Information Technology, Cybersecurity, Business, or a related field; relevant privacy or data protection experience may also be considered

- Working experience with DPDP, GDPR is an added advantage; certifications or training such as CIPP/A, CIPP/E, CIPM, or other relevant privacy qualifications are desirable

- Experience managing security incidents and crisis situations

- Strong leadership, communication, and decision-making skills

Preferred Qualifications

- Bachelor’s degree in IT, Cybersecurity, or related field

Certifications such as ( Certified Information Systems Security Professional (CISSP) - Certified Information Privacy Professional (CIPP) - Certified Data Privacy Solutions Engineer (CDPSE ), CDPO or ISO/IEC 27701.
Requirements
Key Requirements Experience: 10 years of overall experience in the IT Domain, reflecting a broad and well-rounded understanding of the IT industry, its products, and market dynamics Minimum 4 years of relevant experience specifically in Cyber Security product selling, demonstrating focused, hands-on exposure to selling Cyber Security. Education Engineering / Computer Science Graduate preferred, reflecting a preference for candidates with a technical educational foundation that supports deeper engagement with product and solution discussions. Technical Knowledge Working knowledge of Cyber Security domains, layers, and solutions candidates should be able to speak knowledgeably about the different areas within Cyber Security. Awareness and understanding of relevant OEMs (Original Equipment Manufacturers) in the Cyber Security space Candidates should be familiar with the key vendors/manufacturers operating in this market and their respective offerings. Client Engagement Ability to independently handle CxO-level interactions and discussions C Candidates must be comfortable and capable of engaging directly with senior client stakeholders (CxOs) on their own, managing these high-level conversations without requiring support from other team members.

📌 Data Privacy Specialist (India)
🏢 SQ1 Security Technology Private
📍 India