Privacy & Compliance Analyst (GDPR)

We are seeking a detail-oriented and proactive Data Protection Officer to join our team. The ideal candidate will be responsible for ensuring compliance with data protection regulations, managing data subject rights requests, and supporting privacy assessments across the organization. This role requires close collaboration with Legal, Compliance, Security, and Product teams to embed data protection principles into daily operations. The position is based on-site and offers a competitive monthly salary.

Key Responsibilities

ROPA & Data Inventory: Develop and maintain an up-to-date Record of Processing Activities (ROPA), documenting lawful bases, processing purposes, and retention periods to ensure regulatory compliance.

DSARs Management: Oversee the entire data subject access rights (DSARs) process, ensuring all statutory deadlines are met and requests are handled efficiently.

DPIAs & Privacy Assessments: Assist with Data Protection Impact Assessments (DPIAs) and conduct privacy reviews for new products, features, and monitoring tools to identify and mitigate risks.

Processor Governance: Manage international data transfers, including Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs), and Transfer Risk Assessments (TRAs). Review vendor and sub-processor Data Processing Agreements (DPAs) and assess associated risks.

Privacy Documentation: Prepare, update, and maintain comprehensive privacy policy documentation to support organizational compliance.

Cross-functional Collaboration: Partner with Legal, Compliance, Security, and Product teams to integrate data protection considerations into everyday business decisions and processes.

Required Qualifications

- Practical experience working with GDPR and UK GDPR frameworks, specifically in areas such as ROPA, DPIAs, and DSARs.
- A law degree (LL.B.) or a professional background focused on privacy, data protection, or compliance.
- Strong technical literacy, with the ability to evaluate SaaS vendors, monitoring tools, and cloud services from a privacy perspective.
- Excellent written communication skills to produce clear, concise, and accurate documentation.
- Strong organizational skills to manage registers and deadlines effectively.
- Self-motivated and capable of independently managing assessments and compliance tasks from start to finish.

Preferred Qualifications and Benefits

- Certification such as CIPP/E (Certified Information Privacy Professional/Europe) or CIPM (Certified Information Privacy Manager) is highly desirable.
- Competitive monthly salary ranging from Rs150,000 to Rs250,000.
- Opportunity to work in a collaborative, in-person environment that values data protection and privacy as core business principles.

This role offers the chance to play a critical part in maintaining and enhancing our data protection framework while working alongside diverse teams to ensure compliance and protect individual privacy rights.