Privacy & Compliance Analyst (GDPR)

We are seeking a detail-oriented Privacy Officer to join our team and ensure compliance with data protection regulations. The ideal candidate will be responsible for managing and maintaining privacy-related processes and documentation, supporting cross-functional teams, and safeguarding personal data in line with GDPR and UK GDPR requirements. This role requires a proactive individual who can independently manage privacy assessments and collaborate effectively with various departments.

Key Responsibilities

ROPA & Data Inventory: Develop and maintain a comprehensive, up-to-date Record of Processing Activities (ROPA), detailing lawful bases, processing purposes, and retention schedules.

Data Subject Access Requests (DSARs): Oversee the entire DSAR process, ensuring timely and accurate responses that comply with statutory deadlines.

Data Protection Impact Assessments (DPIAs) & Privacy Reviews: Assist in conducting DPIAs and perform privacy assessments for new products, features, and monitoring tools to identify and mitigate risks.

Processor Governance: Manage international data transfers, including Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs), and Transfer Risk Assessments (TRAs). Review vendor and sub-processor Data Processing Agreements (DPAs) and assess associated risks.

Privacy Documentation: Prepare, update, and maintain privacy policy documentation to reflect current practices and regulatory requirements.

Collaboration: Work closely with Legal, Compliance, Security, and Product teams to integrate privacy considerations into daily business decisions and project development.

Required Qualifications

- Practical experience working with GDPR and UK GDPR frameworks, including hands-on involvement with ROPA, DPIAs, and DSARs.
- A law degree (LL.B.) or a professional background in privacy, compliance, or Governance, Risk, and Compliance (GRC).
- Strong technical literacy to evaluate SaaS vendors, monitoring solutions, and cloud-based services.
- Excellent written communication skills to draft clear and precise privacy documentation.
- Strong organizational abilities to manage registers, track deadlines, and ensure reliable compliance.
- Self-motivated with the capability to independently manage privacy assessments from initiation to completion.

Preferred Qualifications and Benefits

- Certification such as Certified Information Privacy Professional/Europe (CIPP/E) or Certified Information Privacy Manager (CIPM) is advantageous.
- Competitive monthly salary ranging from Rs150,000 to Rs250,000.
- This position requires in-person attendance at the workplace.

This role offers the opportunity to play a critical part in protecting personal data and ensuring regulatory compliance within a dynamic environment. If you have a passion for privacy and data protection, coupled with the skills to manage complex processes, we encourage you to apply.