Senior Associate

We are looking for a Data Privacy Implementor with hands-on implementation experience to drive the implementation and maintenance of Pivot Path's PIMS in alignment with ISO/IEC 27701:2019, applicable privacy regulations like DPDP/GDPR and customer requirements. 

Key Responsibilities 

• Drive end-to-end implementation of ISO/IEC 27701:2019 PIMS and privacy controls. 
• Develop and maintain RoPA, PII inventory, data flows, Privacy Risk Register and SoA. 
• Conduct/support DPIAs/PIAs and privacy risk assessments. 
• Implement Controller and Processor privacy requirements, including HR processor activities. 
• Implement and manage DSAR, consent, privacy notice, retention, deletion and data transfer processes. 
• Implement DPA and third-party/sub-processor privacy controls. 
• Prepare and maintain objective evidence for ISO 27701 certification audits. 
• Drive privacy control gaps, corrective actions and audit findings to closure. 
• Support privacy awareness, internal audits and management reviews. 

Mandatory Requirements 

• Hands-on implementation experience in ISO/IEC 27701 / PIMS is mandatory. 
• 3–6 years of experience in Data Privacy, PIMS, GRC, Compliance or Information Security. 
• Strong working knowledge of ISO/IEC 27701 and ISO/IEC 27001. 
• Practical experience with RoPA, DPIA/PIA, DPA, DSAR, privacy risk assessments and privacy controls. 
• Experience implementing requirements for both PII Controllers and PII Processors. 
• Strong documentation, stakeholder-management and audit-readiness skills. 
• ISO/IEC 27701 Lead Implementer / Lead Auditor certification.