DPDP Compliance Specialist

Position Overview:

We are looking for a DPDP Compliance Specialist with 2 plus years of experience in data privacy, compliance, risk management, or information security. The role will primarily focus on DPDP compliance governance, framework implementation, policy management, risk assessment, audits, and regulatory compliance.

Key Responsibilities:

• Support the implementation, maintenance, and continuous improvement of the organizations DPDP compliance and governance framework.
• Develop, maintain, and review DPDP policies, standards, procedures, guidelines, and compliance controls.
• Conduct DPDP compliance assessments and gap assessments and track remediation actions to closure.
• Maintain compliance registers, control matrices, evidence repositories, and governance dashboards.
• Support identification, assessment, and mitigation of privacy and data protection risks.
• Assist in maintaining Records of Processing Activities (RoPA), data inventories, and data flow documentation.
• Support Privacy Impact Assessments (PIAs/DPIAs) for new products, applications, processes, and business initiatives.
• Coordinate with Legal, IT, Information Security, HR, Procurement, and business teams to ensure DPDP requirements are implemented effectively.
• Support Data Principal rights management, including access, correction, erasure, consent withdrawal, and grievance management.
• Assist with personal data breach/incident management, including investigation, documentation, escalation, and regulatory compliance requirements.
• Support third-party/vendor privacy assessments and ensure appropriate data protection requirements are incorporated into contracts and agreements.
• Plan and coordinate internal/external DPDP audits, compliance reviews, and regulatory assessments.
• Prepare periodic DPDP governance reports, management dashboards, risk reports, and compliance metrics.
• Conduct employee privacy awareness and DPDP training programs.
• Monitor changes in privacy regulations and provide regulatory impact assessments and recommendations to stakeholders.
• Support the organization in establishing and monitoring privacy-by-design and data protection controls.

Consent Management

• Hands-on experience with Consent Management Tools/Platforms, including consent capture, preference management, withdrawal, and maintenance of consent records.
• Support configuration, monitoring, and reporting of consent mechanisms and ensure alignment with DPDP consent requirements and auditability.

Required Skills & Qualifications:

• 2 plus years of experience in DPDP, Data Privacy, GDPR, GRC, Information Security, Risk, or Compliance.
• Strong understanding of the Digital Personal Data Protection Act, 2023 and its compliance requirements.
• Practical experience in privacy governance, compliance assessments, risk management, policy development, and audit coordination.
• Good understanding of RoPA, data mapping, privacy impact assessments, data retention, data classification, breach management, and Data Principal rights.
• Hands-on experience with a Consent Management Tool.
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Experience working with cross-functional teams and managing compliance activities.

Preferred Certifications:

• CIPP/E, CIPM, CIPT, or equivalent privacy certification.
• ISO 27001 / ISO 27701 certification or knowledge.
• DPDP/Indian Data Privacy certification or training.