Senior Data Protection Consultant

About The Job

Location: Mumbai (Onsite)

Experience: 3–5 Years

Employment Type: Full-Time

Immediate Joiners or candidates serving a notice period of up to 15 days will be preferred.

About the Role

We are looking for a highly motivated Senior Data Protection Consultant to join our growing Privacy Consulting practice. The ideal candidate will have hands-on experience in implementing privacy programs, conducting privacy assessments, advising clients on global privacy regulations, and driving enterprise-wide data protection initiatives.

This role offers the opportunity to work with leading organizations across BFSI, Healthcare, Retail, Manufacturing, Technology, E-commerce, and other industries, delivering strategic privacy consulting engagements while helping organizations establish mature privacy governance frameworks.

Key Responsibilities

• Lead end-to-end privacy consulting engagements across multiple industry verticals.
• Advise clients on global privacy regulations including DPDPA, GDPR, CCPA/CPRA etc
• Conduct privacy maturity assessments, gap assessments, compliance reviews, and privacy health checks.
• Develop practical remediation roadmaps to address regulatory and operational privacy risks.
• Design and implement enterprise privacy governance frameworks, policies, standards, procedures, and operational controls.
• Conduct data discovery, data mapping, and data flow assessments to identify personal data processing activities.
• Prepare and maintain Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs), Data Protection Impact Assessments (DPIAs)
• Support clients in implementing Privacy by Design and Privacy by Default principles across business processes and technology platforms.
• Assist organizations in developing privacy notices, consent management frameworks, data retention policies, breach response procedures, and data subject rights processes.
• Draft, review, and negotiate privacy-related contractual documents, including Data Processing Agreements (DPAs), Data Sharing Agreements (DSAs), Standard Contractual Clauses (SCCs), Non-Disclosure Agreements (NDAs), and vendor contracts.
• Conduct vendor privacy assessments and third-party risk reviews to evaluate processor compliance.
• Advise clients on cross-border data transfers and international privacy obligations.
• Identify privacy and compliance risks across business operations and recommend practical mitigation strategies.
• Support privacy incident investigations, breach assessments, regulatory notifications, and remediation planning.
• Assist clients during regulatory inspections, privacy audits, certification exercises, and compliance reviews.
• Engage with Legal, Compliance, Information Security, Risk, HR, Product, Procurement, and Business teams to embed privacy controls across the organization.
• Conduct stakeholder workshops, executive presentations, and privacy awareness sessions.

Required Skills and Experience

• 3-5 years of experience in Data Privacy, Data Protection, Privacy Consulting, Information Security Compliance, or Regulatory Compliance.
• Strong working knowledge of DPDPA, GDPR, and one or more global privacy regulations.
• Hands-on experience in conducting RoPA, DPIA, PIA, TIA, LIA, data mapping, and privacy assessments.
• Experience in drafting and reviewing DPAs, SCCs, NDAs, MSAs, SOWs, and other commercial agreements.
• Strong understanding of privacy governance, consent management, data lifecycle management, and third-party risk management.
• Excellent analytical, communication, stakeholder management, and presentation skills.

Preferred Qualifications

• Bachelor's degree in Law, Computer Science, Information Security, Engineering, or a related discipline.
• LLB/LLM, B.Tech, B.E., MCA, or equivalent qualifications are preferred.
• Candidates with a background in Privacy, Cybersecurity, Risk, or Compliance Consulting will be given preference.