Senior Data Protection Consultant

About The Job
Location: Bengaluru, Pune & Delhi NCR
Experience: 2–5 Years
Employment Type: Full-Time
Immediate Joiners or candidates serving a notice period of up to 15 days will be preferred.
About the Role
We are looking for a Senior Data Protection Consultant to join our growing Privacy Consulting practice. You will turn the Digital Personal Data Protection Act (DPDPA), the IT Act and global frameworks such as GDPR and CCPA/CPRA into practical, engineering-friendly action. You will run privacy assessments, build RoPAs and data inventories, conduct DPIAs, shape data privacy agreements and Data Fiduciary to Data Processor arrangements, and work with product and technology teams to make sure privacy requirements are actually implemented in systems and processes, not just documented
Key Responsibilities
Interpret the DPDPA, the IT Act and global regulations such as GDPR and CCPA/CPRA for client engagements and advise on obligations.
Support and lead privacy maturity assessments, gap assessments, compliance reviews and privacy health checks across industry verticals.
Support GDPR and DPDPA compliance work, including cross-border transfer assessments and mapping obligations across both regimes.
Develop practical remediation roadmaps and client-facing privacy advisory deliverables.
Track regulatory developments and keep Dutient's frameworks, templates and automated privacy tooling current.
Build and maintain Records of Processing Activities (RoPA) and data inventories, mapping personal data flows across systems, vendors and business functions.
Conduct data discovery, data mapping and data flow assessments to identify personal data processing activities.
Conduct and support DPIAs, PIAs, Legitimate Interest Assessments (LIAs), Transfer Impact Assessments (TIAs) and privacy risk assessments, documenting risks, likelihood, impact and mitigations.
Draft policies, standards, procedures and privacy notices, and support privacy governance frameworks and operational controls.
Support Privacy by Design and Privacy by Default across business processes and technology platforms.
Work with technical teams to embed privacy into technology operations, including consent management, data retention, access controls, data subject rights handling and breach response.
Draft, review and negotiate data privacy agreements, including Data Processing Agreements (DPAs), Data Sharing Agreements (DSAs), Standard Contractual Clauses (SCCs), NDAs and vendor contracts.
Structure Data Fiduciary to Data Processor relationships.
Conduct vendor privacy assessments and third-party risk reviews to evaluate processor compliance.
Advise clients on cross-border data transfers and international privacy obligations.
Required Skills and Experience
2 to 5 years of experience in Data Privacy, Data Protection, Privacy Consulting, Information Security Compliance or Regulatory Compliance.
Sound understanding of the DPDPA, including the roles of Data Fiduciary, Data Processor and Data Principal and the obligations between them.
Working knowledge of GDPR (data subject rights, lawful basis, cross-border transfers, SCCs) and familiarity with the IT Act; exposure to CCPA/CPRA or other global privacy regulations; exposure to ISO 27701 is a plus.
Hands-on ability to create RoPAs and data inventories and to work on DPIAs, PIAs, TIAs, LIAs and data mapping.
Understanding of how data privacy agreements are created (DPAs, SCCs, NDAs, MSAs, SOWs) and what clauses matter in practice.
Understanding of privacy governance, consent management, data lifecycle management and third-party risk management.
Understanding of how privacy is embedded into technological operations and technical implementation, with the ability to speak to engineers in their language
Preferred Qualifications
Bachelor's degree in Law, Computer Science, Information Security, Engineering, or a related discipline.
LLB/LLM, B.Tech, B.E., MCA, or equivalent qualifications are preferred.
Candidates with a background in Privacy, Cybersecurity, Risk, or Compliance Consulting will be given preference.

Work arrangement
No