Protiviti India Member Private Limited is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. We provide consulting and internal audit solutions to clients through our network of more than 85 offices in over 25 countries. We work with companies in various industries, including financial services, healthcare, technology, and retail, helping them improve their operational and financial performance, risk management, and governance.

Role :

- Must have a minimum of 2+ years of relevant experience in Data Privacy and should be capable of independently managing the Data Privacy charter for the organization.

- The candidate should have hands-on experience in performing DPIAs (Data Protection Impact Assessments) from scratch and be able to create, review, and manage Privacy Policies, Processes, SOPs, RoPA (Records of Processing Activities), and related documentation.

- Strong understanding and practical exposure to implementing global privacy regulations such as GDPR, along with working knowledge of the DPDP Act and other applicable data protection frameworks.

- Should be capable of managing and sustaining GRC/Data Privacy frameworks and standards, including ISO 27001, ISO 27701, and related compliance requirements.

- Good knowledge and experience in conducting Vendor/Third-Party Risk Assessments, Business Impact Assessments (BIA), and privacy/compliance evaluations.

- Ability to work as a self-starter with minimal supervision and contribute independently while collaborating with cross-functional teams.

- Relevant certifications such as OneTrust, CIPP/E, CIPP/US, or equivalent privacy certifications will be preferred.

- Experience in implementation or management of any Privacy Governance tool/platform will be considered an added advantage.

This is a full-time on-site role based out of the Mumbai office with no location/work mode exclusions.