About Company:
BISPL (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax & regulatory advisory & assistance for both domestic and international organisations across a range of industries. BDO India is led by more than 300 Partners & Directors with a team of over 7000 professionals operating across 12 cities. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying the increasing the current team size multi-fold.
Key Responsibilities:
- Advise clients on data privacy laws and regulations (such as DPDP, GDPR, CCPA).
- Conduct data privacy assessments, gap analyses, and privacy risk assessments.
- Support the development and implementation of privacy policies, procedures, and frameworks.
- Assist with data mapping, records of processing activities (RoPA), and data lifecycle management.
- Provide guidance on consent management, data subject rights, and privacy-by-design principles.
- Review contracts, data processing agreements, and vendor privacy practices.
- Support incident response and data breach management, including regulatory notifications.
- Deliver privacy training and awareness sessions to clients and stakeholders.
- Stay up to date with emerging privacy regulations, industry standards, and best practices.
Required Skills & Qualifications:
- Bachelor's degree in Law, Information Technology, Cyber security, Business, or a related field.
- Experience of 1.5 - 2.5 years of working in consulting, legal, or technology-driven environments and work experience in Data privacy tools.
- Strong knowledge of data protection and privacy regulations.
- Experience in privacy consulting, compliance, risk management, or related roles.
- Ability to interpret legal and regulatory requirements into practical solutions.
- Strong analytical, documentation, and communication skills.
- Ability to manage multiple client engagements and deadlines.
Preferred Qualifications:
- Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).
- Familiarity with information security standards (e.g., ISO 27001, ISO 27701).
