Data Privacy Consultant

About Position:
We are seeking a Data Privacy Consultant with 3-5 years of experience in data privacy, risk assessment, and regulatory compliance to support the Data Privacy function within the DPO Office. The role will focus on conducting Data Protection Impact Assessments (DPIAs), evaluating privacy risks, performing third-party privacy due diligence, and ensuring compliance with data protection regulations and organizational privacy standards. The ideal candidate will collaborate with business, technology, legal, procurement, and security teams to strengthen privacy governance and risk management practices across the organization.
Role: Data Privacy Consultant
Location: Mumbai
Experience: 3 to 5 Years
Job Type: Full-Time Employment
What You'll Do:
Conduct end-to-end Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new products, business initiatives, technology changes, and data processing activities.
Evaluate privacy risks and recommend appropriate mitigation measures to ensure regulatory compliance and data protection best practices.
Perform third-party and vendor privacy assessments, including reviews of processors, service providers, sub-processors, and digital lending partners.
Assess data processing activities for compliance with the DPDP Act 2023, applicable privacy regulations, internal policies, and contractual obligations.
Review privacy and data protection clauses within contracts and coordinate remediation activities with Legal, Procurement, and Information Security teams.
Track privacy findings, risks, and remediation actions through closure and maintain supporting documentation.
Maintain accurate records of privacy assessments, risk evaluations, and compliance evidence.
Prepare privacy risk dashboards, management reports, and governance updates for the DPO Office and relevant committees.
Support privacy governance initiatives, audits, regulatory reviews, and control assessments.
Collaborate with cross-functional stakeholders to embed privacy requirements into business processes and technology implementations.
Provide guidance and awareness on privacy obligations, risk controls, and data protection practices.
Expertise You'll Bring:
3 to 5 years of experience in Data Privacy, Data Protection, Privacy Risk Management, or Regulatory Compliance.
Hands-on experience conducting Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) from initiation through completion.
Strong knowledge of the Digital Personal Data Protection (DPDP) Act 2023, associated rules, and privacy compliance requirements.
Good understanding of GDPR principles, privacy-by-design concepts, lawful processing requirements, and privacy risk management practices.
Experience conducting third-party privacy assessments, vendor due diligence, and privacy compliance reviews.
Knowledge of privacy governance frameworks, control monitoring, and compliance assessment methodologies.
Familiarity with ISO/IEC 27701, privacy information management systems, and privacy risk management principles.
Experience reviewing privacy requirements within contracts, agreements, and vendor engagements.
Ability to identify privacy risks and develop practical remediation recommendations.
Strong stakeholder management skills with experience working closely with Business, Technology, Legal, Procurement, Information Security, and Compliance teams.
Excellent documentation, reporting, risk assessment, and analytical capabilities.
Strong communication and presentation skills with the ability to influence stakeholders across multiple functions.
Professional certifications such as CIPP/E, CIPM, DCPP, ISO/IEC 27701 Lead Auditor, or ISO/IEC 27701 Lead Implementer will be an added advantage.
Benefits:
Competitive salary and benefits package
Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
Opportunity to work with cutting-edge technologies
Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
Annual health check-ups
Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents
Values-Driven, People-Centric & Inclusive Work Environment:
Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.
We support hybrid work and flexible hours to fit diverse lifestyles.
Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment
Let's unleash your full potential at Persistent - persistent.com/careers
"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Work arrangement
No