Associate- BAS Cyber- GRC + Data Privacy-Bangalore

About Company

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. It's a leading service provider for the mid-markets with client service at its heart.BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold.

Job Summary:

The Data Privacy professional will assist clients in complying with data protection regulations such as DPDP, GDPR, and CCPA. The role involves conducting privacy assessments, supporting implementation of privacy frameworks, advising on data lifecycle and consent management, and supporting breach response activities.

Educational Qualifications:

• Bachelor's degree in Law, Information Technology, Cybersecurity, Business, or a related field.

• Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).

Roles & Responsibilities:

• Advise clients on data privacy laws and regulations (such as DPDP, GDPR, CCPA).

• Conduct data privacy assessments, gap analyses, and privacy risk assessments.

• Support the development and implementation of privacy policies, procedures, and frameworks.

• Assist with data mapping, records of processing activities (RoPA), and data lifecycle management. • Provide guidance on consent management, data subject rights, and privacy-by-design principles. • Review contracts, data processing agreements, and vendor privacy practices.

• Support incident response and data breach management, including regulatory notifications.

• Deliver privacy training and awareness sessions to clients and stakeholders.

• Stay up to date with emerging privacy regulations, industry standards, and best practices