Senior Privacy Analyst

Location: Bengaluru
Department: Information Security

Job Summary
We are looking for a Privacy Analyst with 4+ years of experience to support our global privacy and data protection program. The ideal candidate should have hands-on experience with privacy regulations, data protection compliance, privacy operations, and vendor privacy assessments. The role involves working closely with legal, security, engineering, HR, and business teams to ensure compliance with global privacy requirements and foster a privacy-by-design culture.
Qualifications:

• Education: Any graduate in Science stream or a technical diploma holder. Masters will be an added advantage.
• Experience: 4 years of progressive experience in Privacy roles in SaaS based environment

Key Skills:

• Good understanding of global privacy regulations including:

• GDPR

• UK GDPR

• India Digital Personal Data Protection Act (DPDPA)

• CCPA/CPRA

• Experience handling:

• RoPA

• DPIA / PIA

• DSR/DSAR management

• Vendor privacy assessments

• Data Processing Agreements (DPAs)

• Knowledge of data lifecycle management and cross-border data transfers.

• Familiarity with cloud environments (AWS, Azure, or GCP) and SaaS business models is preferred.

• Understanding of security controls aligned with ISO 27001, SOC 2, or similar frameworks.

• Excellent written and verbal communication skills.

Key Responsibilities:

• Support the implementation and maintenance of the organization's privacy program.
• Assist in ensuring compliance with applicable privacy laws and regulations such as GDPR, UK GDPR, DPDPA (India), CCPA/CPRA, and other global privacy regulations.
• Maintain Records of Processing Activities (RoPA) and data inventories.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA) for new products, services, and business initiatives.
• Review customer and vendor privacy requirements, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and privacy questionnaires.
• Support third-party privacy risk assessments and due diligence activities.
• Coordinate responses to data subject rights requests (DSARs), including access, correction, deletion, and portability requests.
• Assist in managing privacy incidents and support breach notification assessments
• Work with engineering and product teams to embed Privacy by Design and Privacy by Default principles.
• Support cross-border data transfer assessments and applicable transfer mechanisms.
• Monitor changes in privacy regulations and assist in updating internal policies, procedures, and controls.
• Conduct privacy awareness sessions and employee training.
• Assist during customer audits and privacy-related certification assessments.