Data Privacy

Data Privacy Consultant (GDPR | CCPA | DPDP)

Job Description

KPMG India is seeking talented Data Privacy professionals to join its Digital Trust practice. The role involves working with clients across industries to assess privacy risks, implement privacy programs, and support compliance with global and regional data protection regulations.

The ideal candidate will have experience in privacy compliance, privacy risk assessments, data mapping, and implementation of privacy governance frameworks.

Key Responsibilities

• Assist clients in understanding and complying with data privacy regulations such as GDPR, CCPA/CPRA, DPDP Act, and other global privacy requirements.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Perform data discovery, data mapping, and data classification exercises.
• Support development and implementation of privacy governance programs, policies, and procedures.
• Assist clients in establishing consent management and data retention processes.
• Support Data Subject Rights (DSAR) processes including access, rectification, deletion, and portability requests.
• Advise clients on Privacy by Design principles and integration of privacy controls into business processes and technologies.
• Support privacy compliance reviews, risk assessments, and remediation activities.
• Develop privacy awareness and training programs for client organizations.
• Monitor evolving privacy regulations and provide practical compliance recommendations.
• Engage with client stakeholders and work collaboratively across business and technology teams.

Required Skills

• Data Privacy
• Data Protection
• GDPR
• CCPA / CPRA
• DPDP Act
• Privacy Compliance
• Privacy Impact Assessment (PIA)
• Data Protection Impact Assessment (DPIA)
• Data Mapping
• Data Classification
• Privacy by Design
• Data Governance
• DSAR Management
• Risk Assessment
• GRC (Governance, Risk & Compliance)

Eligibility Criteria

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, Cyber Security, or related discipline.
• 2 to 12 years of experience in Data Privacy, Privacy Compliance, GRC, Digital Trust, or related consulting domains.
• Experience working on GDPR, CCPA, DPDP, or other privacy regulations.
• Strong analytical, problem-solving, and stakeholder management skills.
• Excellent written and verbal communication skills.

Not Suitable For

• Pure Legal Professionals
• Litigation Lawyers
• Legal Counsels with no hands-on privacy implementation experience