Senior Associate

About the Role

We are looking for a Data Privacy & Compliance professional with strong experience in privacy regulations, risk assessments, and data protection frameworks. The candidate will be responsible for supporting and managing privacy compliance initiatives across the organization, with a strong focus on DPDP, GDPR, DPIA, ROPA, HIPAA, and privacy risk management.

Key Responsibilities

• Manage and support Data Privacy and DPDP Act compliance initiatives.
• Conduct Data Protection Impact Assessments (DPIA) and Privacy Risk Assessments.
• Support compliance with GDPR and other applicable global data privacy regulations.
• Develop, maintain, and review Records of Processing Activities (ROPA).
• Support HIPAA privacy and data protection requirements where applicable.
• Identify privacy risks related to data collection, processing, storage, sharing, and retention.
• Partner with Cybersecurity and Information Security teams to assess privacy and security risks.
• Review data flows, processing activities, third-party relationships, and privacy controls.
• Support implementation and monitoring of privacy policies, procedures, standards, and controls.
• Assist with privacy assessments for new products, applications, processes, and vendors.
• Maintain privacy documentation, assessment records, risk registers, and compliance evidence.
• Support privacy audits, regulatory assessments, and remediation activities.
• Work with stakeholders to track and close identified privacy and compliance gaps.
• Leverage privacy management and data discovery tools such as OneTrust and BigID.

Required Skills

• Strong understanding of Data Privacy, Data Protection, and Privacy Compliance.
• Hands-on experience with DPDP Act, GDPR, and privacy risk management.
• Experience in DPIA / PIA and Privacy Risk Assessments.
• Strong knowledge of ROPA / Records of Processing Activities.
• Understanding of HIPAA privacy requirements.

Preferred Qualifications

• Bachelor's/Master's degree in Information Security, Cybersecurity, Law, IT, Risk Management, or a related field.
• Experience in privacy compliance within IT, BFSI, healthcare, consulting, technology, or other regulated industries.