Primary Responsibilities:

• Provide advice to clients on their Privacy and Data protection compliance posture

• Conduct Privacy compliance assessments and report on identified gaps regarding applicable regulation(s) and associated risks

• Develop prioritized action plan and recommend appropriate measures to comply with relevant Privacy and Data protection regulation(s) and best practices

• Monitor legislation changes, making the necessary recommendations to ensure compliance

• Implement and manage Privacy compliance program

• Draft pertinent reports and deliverables according to the services

• Act as the outsourced Data Protection Officer for clients (DPOaaS), or as the advisor of the existing internal Data Protection Officer

• Act as the subject matter expert for privacy and security-related policies and procedures revision and development

• Conduct Privacy and Data Protection Impact Assessments (PIA/DPIA)

• Develop and provide Privacy and Data protection staff awareness and trainings

• Support the sales function in engineering sales related to privacy services, which may include assisting in the redaction of proposals and participating in meetings with leads

Qualifications Required:

• 4+ years of regulatory compliance and/or governance experience

• Minimum of 2 years direct experience with data protection and privacy compliance/services

• Solid knowledge of the Digital Personal Data Protection Bill (DPDPB 2022), Information Technology Act, 2000 (the IT Act) and Information Technology and Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011 (the SPDI Rules)

• Overall knowledge of cybersecurity threat landscape and computer security systems

• Solid Project Management experience

• Perfect bilingual English/Hindi is mandatory

Assets:

• Knowledge of different privacy laws (i.e., GDPR, ePrivacy, CCPA, PIPEDA, HIPPA…)

• Privacy certifications and/or project management certifications (i.e. ISO27001/27701 Lead implementor, CIPP/E CIPP/US, CIPP/C, CIPM, CIPT…)

• Knowledge of one or more major economic sectors i.e., banking-insurance, distribution, industry, etc.

• Knowledge of additional languages (French, Spanish, etc.)

• Bachelor Degree in Data protection, Privacy or Cybersecurity Law, and/or in civil and/or common law

Competencies required:

• Customer-facing abilities

• Proactive attitude

• Time management skills

• Excellent knowledge of Excel, PowerPoint and Word

• Excellent analytical and reporting skills

• Capacity to explain complex requirements to clients

• Capacity to manage competing priorities