Senior Engineer - Compliance at An IT Service Company

Responsibilities

• Support the implementation and maintenance of the DPDP Act compliance framework.
• Assist the DPO with lawful and secure personal data processing.
• Conduct internal privacy audits and Data Protection Impact Assessments (DPIAs).
• Support Privacy Enhancing Technology evaluation and implementation.
• Promote ISO 27701 and other privacy standards and best practices.
• Coordinate with regulators such as RBI on data protection requirements.
• Collaborate with IT, Cyber Security, and business teams on privacy controls.
• Support vendor privacy due diligence and breach response activities.
• Advise management on privacy risks and compliance issues.
• Deliver privacy training and stay updated on emerging regulations.

Preferred candidate profile

• 24 years of experience in data privacy, legal compliance, or information security.
• Experience in BFSI or IT/ITES sectors is preferred.
• Working knowledge of the DPDP Act 2023 and Rules 2025.
• Understanding of GDPR and other global privacy regulations.
• Familiarity with ISO 27001, ISO 27701, NIST, OWASP, SANS, and MITRE.
• Knowledge of privacy practices such as ROPA, DPIA, consent management, and Privacy by Design.
• Understanding of data security controls, including access control, DLP, encryption, masking, and data classification.
• Strong communication, stakeholder management, problem-solving, and prioritization skills.