Assistant Manager / Deputy Manager | DPDP Consultant | NISG

Assistant Manager / Deputy Manager | DPDP Consultant - NISG New Delhi

Roles and Responsibilities

• Act as a DPDP subject matter expert for client engagements and internal initiatives.
• Engage with clients to understand their organisational context, data processing practices, compliance requirements and implementation priorities.
• Plan, customise and deliver DPDP awareness workshops, training and capacity-building programmes for senior leadership, functional teams and other stakeholders.
• Develop and customise workshop content, including presentation decks, training material, practical examples, contextual case studies, scenarios and tabletop exercises.
• Conduct/Support/Oversee DPDP gap/readiness assessments, including review of existing policies, processes, controls and practices.
• Identify compliance gaps and contribute to gap matrices, assessment reports, recommendations, compliance roadmaps and implementation plans.
• Provide practical guidance to public sector organisations on DPDP implementation, including governance, roles and responsibilities, policies, processes, data management, consent/notice-related requirements, rights management, security safeguards, grievance handling and other applicable obligations.
• Coordinate with clients, internal teams and subject matter experts to ensure effective planning and delivery of DPDP engagements.
• Support the development of proposals, methodologies, frameworks, templates and other technical materials for DPDP-related engagements.
• Keep abreast of developments in the DPDP regulatory landscape, Rules, guidance and implementation practices, and incorporate relevant developments into client engagements and knowledge resources.
• Contribute to the development and strengthening of NISG's DPDP advisory, assessment, training and capacity-building offerings.

Experience

• 3+ years of relevant experience in data privacy, data protection, information security, cybersecurity, regulatory compliance, risk advisory or related consulting roles.
• Experience in client-facing advisory, consulting, assessment or compliance assignments.
• Experience in designing and delivering professional training, awareness programmes or workshops.
• Strong working knowledge of the Digital Personal Data Protection Act, 2023, including its key provisions, obligations, roles and compliance requirements.
• Strong written and verbal communication and presentation skills.
• Ability to interpret regulatory requirements and translate them into practical organisational actions.
• Applicants with experience of working on DPDP Act implementation, privacy/data protection assessments, compliance gap assessments or readiness assessments will be preferred
• Applicants with experience of working with Government Departments, PSUs, statutory bodies or other public sector organisations will be preferred

Qualifications

Mandatory:

• B.E./ B.Tech. /MCA in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.
• 6+ years of post-qualification experience

Desirable:

• Graduate/Postgraduate degree in Law
• Professional certifications in Data Privacy, Information Security, Cybersecurity or related areas.
• Knowledge of privacy/data protection frameworks and standards such as ISO 27701, ISO 27001, GDPR or equivalent frameworks.