Specialist

Job Description: Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

• Responsibilities: Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests

• Assess request validity, identity verification requirements, and applicable legal exemptions

• Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data

• Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws

• Draft and issue DSAR responses and maintain complete case documentation after review

• Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives

• Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting

• Support audits, regulatory inquiries, and compliance reviews related to data subject rights

• Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality

• Develop and maintain DSAR procedures, playbooks, and knowledge repositories

• Qualifications: 4-7 years of experience in Privacy, Compliance or Data Governance

• Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations

• Strong understanding of data subject rights, data retention, and privacy compliance requirements

• Excellent stakeholder management, analytical, and communication skills

• Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage

• Certification like CIPPE. CIPM is preferrable