DPDP Consultant

Job Description: Information Security & Data Privacy Consultant

Company: Kainskep Solutions
Experience: 2-4 Years
Location: Jaipur, Rajasthan
Employment Type: Full-time

About the Role

We are looking for a proactive professional who can help build and strengthen information security and data privacy compliance capabilities. Candidates with strong ISO 27001, GRC, and GDPR experience are encouraged to apply, even if they have limited direct implementation experience with India's DPDP framework.

Key Responsibilities

• Conduct information security gap assessments, risk assessments, and compliance reviews.
• Support ISO 27001 implementation, internal audits, external audits, and maintenance of Information Security Management Systems (ISMS).
• Assist with SOC 2 readiness, control mapping, evidence collection, and audit documentation.
• Interpret GDPR requirements and support privacy compliance activities.
• Understand India's DPDP Act and applicable Rules, and assist with organizational readiness and compliance initiatives.
• Develop and maintain security policies, privacy notices, procedures, risk registers, and compliance documentation.
• Identify compliance gaps and coordinate corrective and preventive actions.
• Support data mapping, personal data inventory, data retention, consent management, and personal data breach response processes.
• Coordinate with internal teams, auditors, clients, and other stakeholders on security and compliance matters.

Required Skills and Qualifications

• 34 years of experience in information security, Governance, Risk & Compliance (GRC), IT audit, privacy compliance, or a related field.
• Practical knowledge of ISO 27001, including security controls, risk assessments, and audit processes.
• Understanding of SOC 2 principles and compliance requirements.
• Working knowledge of GDPR and data protection principles.
• Familiarity with India's DPDP Act, 2023, and its Rules.
• Strong documentation, analytical, communication, and stakeholder management skills.
• Ability to identify compliance gaps and recommend practical remediation measures.
• Proficiency in preparing audit evidence, compliance reports, policies, and risk assessment documentation.

Preferred Qualifications

• Experience supporting ISO 27001 certification or surveillance audits.
• Exposure to SOC 2 Type I or Type II readiness and assessments.
• Experience in privacy impact assessments, data mapping, or privacy program implementation.
• Certifications such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CISA, or relevant privacy certifications.
• Experience in a consulting, IT services, SaaS, or cybersecurity environment.