Primary Responsibilities:

 Provide advice to clients on their Privacy and Data protection compliance posture

 Conduct Privacy compliance assessments and report on identified gaps regarding applicable regulation(s) and associated risks

 Develop prioritized action plan and recommend appropriate measures to comply with relevant Privacy and Data protection regulation(s) and best practices

 Monitor legislation changes, making the necessary recommendations to ensure compliance

 Implement and manage Privacy compliance program

 Draft pertinent reports and deliverables according to the services

 Act as the outsourced Data Protection Officer for clients (DPOaaS), or as the advisor of the existing internal Data Protection Officer

Qualifications Required:

 8+ years of regulatory compliance and/or governance experience

 Minimum of 5 years direct experience with data protection and privacy compliance/services

 Solid knowledge of the Digital Personal Data Protection Bill (DPDPB 2022), Information Technology Act, 2000 (the IT Act) and Information Technology and Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011 (the SPDI Rules)

 Overall knowledge of cybersecurity threat landscape and computer security systems

 Solid Project Management experience

 Perfect bilingual English/Hindi is mandatory. Assets

 Knowledge of different privacy laws (i.e., GDPR, ePrivacy, CCPA, PIPEDA, HIPPA…)

 Privacy certifications and/or project management certifications (i.e. ISO27001/27701 Lead implementor, CIPP/E, CIPP/US, CIPP/C, CIPM, CIPT…)

 Knowledge of one or more major economic sectors i.e., banking-insurance, distribution, industry, etc.

 Knowledge of additional languages (French, Spanish, etc.)

 Bachelor Degre in Data protection, Privacy or Cybersecurity Law, and/or in civil and/or common law