We are seeking a dedicated Data Privacy Specialist to lead the hands-on execution of our privacy program. In this role, you will ensure compliance with GDPR and UK GDPR regulations as we handle significant volumes of personal and identity data across international borders. You will be responsible for maintaining accurate records that demonstrate our privacy posture and readiness for audits. This position requires close collaboration with Legal, Compliance, Security, and Product teams to embed privacy best practices throughout the organization.
Key Responsibilities
ROPA & Data Inventory: Maintain a live Record of Processing Activities (ROPA), documenting lawful bases, processing purposes, and retention periods to ensure transparency and compliance.
DSARs: Manage the entire data subject access rights (DSAR) process, ensuring all statutory deadlines are met efficiently and accurately.
DPIAs & Assessments: Support Data Protection Impact Assessments (DPIAs) and conduct privacy reviews for new products, features, and monitoring tools to identify and mitigate privacy risks.
Processor Governance: Oversee international data transfers, including Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs), and Transfer Risk Assessments (TRAs). Review vendor and sub-processor Data Processing Agreements (DPAs) and assess associated risks.
Privacy Documentation: Prepare and maintain comprehensive privacy policy documentation to support internal governance and external compliance requirements.
Required Qualifications
- Practical experience working with GDPR and UK GDPR frameworks, including managing ROPA, DPIAs, and DSARs.
- A law degree (LL.B.) or a strong background specifically focused on privacy.
- Technical literacy to evaluate SaaS vendors, monitoring tools, and cloud service providers effectively.
- Excellent written communication skills to produce clear and precise documentation.
- Strong organizational abilities to manage registers and deadlines reliably.
- Self-motivated and capable of independently managing privacy assessments from start to finish.
Preferred Qualifications and Benefits
- Certification such as CIPP/E (Certified Information Privacy Professional/Europe) or CIPM (Certified Information Privacy Manager) is considered an advantage.
- Competitive monthly salary ranging from Rs150,000 to Rs250,000.
- This is an in-person role, requiring presence at the designated work location.
This position offers the opportunity to play a critical role in safeguarding personal data and ensuring regulatory compliance within a dynamic, cross-functional environment. If you are passionate about privacy and possess the skills to manage complex data protection requirements, we encourage you to apply.