Senior Privacy Lead - Certinal

About Certinal:

Certinal is an enterprise digital trust, privacy, consent, and compliance platform under Zycus, helping organizations manage critical customer and business interactions securely and compliantly. Our platform spans enterprise eSignature, digital consent, privacy compliance, smart intake, disclosure and information-release workflows, secure document exchange, and other regulated digital workflows.

Certinal works with leading healthcare organizations, including Apollo Hospitals and Bumrungrad International Hospital, and supports complex enterprise environments through integrations with EMR/HIS platforms, SSO systems, APIs, CRMs, ERP platforms, and other business applications.

Job Overview:

We are looking for a Senior Privacy Lead to lead privacy, data protection, and regulatory compliance initiatives across Certinal and support enterprise customers with complex privacy requirements.

The role will combine privacy advisory, regulatory interpretation, risk assessment, customer consulting, and product enablement. The ideal candidate should be able to translate privacy regulations into practical business, operational, and technology requirements while working closely with Product, Engineering, Legal, Sales, Implementation, and customer teams.

Key Responsibilities:

- Lead privacy, data protection, and compliance initiatives across Certinal.

- Interpret and operationalize regulations such as the India DPDP Act, GDPR, CCPA/CPRA, and other applicable privacy frameworks.

- Lead PIAs, DPIAs, privacy risk assessments, gap assessments, audits, and compliance reviews.

- Develop and maintain privacy policies, controls, procedures, documentation, data maps, and Records of Processing Activities.

- Identify privacy risks across products, processes, integrations, and customer implementations and recommend practical remediation measures.

- Work with Product and Engineering teams to embed Privacy by Design and Privacy by Default principles into Certinal's products.

- Translate regulatory requirements into product capabilities, workflows, controls, and technical requirements.

- Act as a privacy advisor to enterprise customers and prospects through discovery sessions, workshops, assessments, and advisory engagements.

- Support Sales and Pre-Sales teams with privacy questionnaires, RFPs, compliance discussions, and customer evaluations.

- Support reviews of privacy clauses, Data Processing Agreements, consent language, notices, and related documentation.

- Monitor regulatory developments and advise internal teams on their impact on Certinal's products and customers.

- Serve as an internal subject matter expert on privacy and data protection.

Required Skills & Experience:

- Strong experience in Privacy, Data Protection, Privacy Consulting, Privacy Compliance, or Privacy Risk Management.

- Strong understanding of privacy principles, data protection requirements, and regulatory frameworks.

- Working knowledge of India Digital Personal Data Protection Act, GDPR, CCPA/CPRA, and other major global privacy frameworks.

- Hands-on experience conducting PIAs, DPIAs, privacy audits, gap assessments, and privacy risk assessments.

- Experience translating regulatory requirements into operational, technical, or product requirements.

- Understanding of consent management, data principal/data subject rights, data retention, data minimization, purpose limitation, and data governance.

- Strong policy drafting, documentation, and report-writing skills.

- Excellent communication, presentation, and stakeholder management skills.

- Ability to engage confidently with senior stakeholders and enterprise customers.

Preferred Qualifications:

- Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, DCPP, or equivalent privacy certifications are preferred.

- Experience in privacy consulting, advisory, SaaS, enterprise software, or technology environments.

- Experience working directly with enterprise customers on privacy transformation or compliance programs.

- Experience working with healthcare organizations or healthcare technology is preferred.

- Familiarity with enterprise SaaS architecture, APIs, cloud platforms, and enterprise integrations.

- Understanding of security and compliance frameworks such as ISO 27001, SOC 2, HIPAA, or similar standards is an advantage.

What We Are Looking For:

We are looking for someone who can operate at both a strategic and execution level. The successful candidate should be able to interpret regulation, advise customers and leadership, conduct detailed privacy assessments, and work closely with technical teams to translate privacy requirements into practical solutions.