Senior Engineer - Compliance

Responsibilities:

• Actively assist in designing, deploying, and maintaining the internal compliance framework to align all business operations with the DPDP Act mandates.
• Assist the DPO in overseeing the secure and lawful processing of personal data, ensuring absolute compliance with India's DPDP Act and preparing the organisation for other global privacy laws such as the EU GDPR.
• Conduct regular internal audits and Data Protection Impact Assessments (DPIAs) for high-risk processing activities.
• Assist the Privacy CoE in the evaluation of Privacy Enhancing Technologies and co-ordinate the selection and implementation of it.
• Contribute to Privacy-related standards and best practices adoption such as ISO 27701
• Align with sectoral regulators (e. g., RBI) on Cyber Security and data handling regimes.
• Collaborate with Business Teams, IT and Cyber Security teams to implement procedural and technical safeguards like encryption, anonymisation, and access controls.
• Support vendor due diligence from a Privacy Compliance perspective.
• Provide support in privacy breach incident investigation and response to personal data breaches, ensuring mandatory notifications to regulators and affected
• individuals within statutory timelines (e. g., 72 hours).
• Advises management of critical issues that may affect the overall compliance and risk posture of the organisation.
• Stay up to date on emerging compliance requirements and trends in technology security and apply that knowledge.
• Provide training and guidance to staff on privacy.
• Compliance and security with best practices and procedures.
• Undertake a course aligned with DPDP Act 2023 requirements.
• PIMS/ISO 27701 LA / LI preferred.

Requirements:

• University graduate or post-graduate degree with specialisation in the field of Cyber Law, Privacy, Computer Science/IT or Engineering Graduate/PG in CS/IT.
• A minimum of 2-4 years in data privacy, legal compliance, or information security, ideally within the BFSI or IT/ITES sectors.
• Basic understanding of IT infrastructure, Cyber Security Standards/Frameworks (ISO 27001/NIST), Application Security (OWASP, SANS, and MITRE) and data security controls (Access Control, Data Classification, DLP, Data Discovery, Masking and Encryption, etc. ).
• Working knowledge of the DPDP Act 2023 and Rules 2025 with the ability to translate requirements into actionable workflows.
• Exposure to Privacy Implementation in line with the DPDP Act such as Privacy Policy Drafting, ROPA, DPIA, Consent Management, Privacy by Design, etc.
• Exposure to GDPR or other privacy compliance laws preferred.
• Familiarity with parallel global frameworks (like GDPR) or local regulations is preferable.
• Excellent verbal and written communication skills are mandatory, with management or stakeholder interaction exposure to bridge technical, legal, and regulatory requirements.
• Strong problem-solving abilities and should prioritise tasks effectively.
• Comfortable working in a fast-paced environment and able to adapt to changing priorities.
• Industry experience preferred.