Experience Required: 06-08 years
Work Location: Chennai / Bangalore
Mode of work: Hybrid
Shift Timing: UK Shift
Key Responsibilities
- Lead end-to-end technical programs focused on GDPR and data privacy.
- Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
- Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
- Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
- Support privacy incident response, audits, compliance assessments, and remediation.
- Manage third-party/vendor privacy risks and data protection requirements.
- Track program KPIs and provide regular updates to senior leadership.
- Drive Privacy by Design and Privacy by Default across technology initiatives.
Must-Have Skills
- Strong hands-on experience with UK GDPR and data privacy programs.
- Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
- Experience managing technical programs involving privacy, compliance, or data protection.
- Strong stakeholder, risk, dependency, and governance management skills.
- Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.
- Experience working with Agile/Scrum and SDLC/DevSecOps environments.
- Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.
Good to Have
- Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
- Experience with regulatory audits and third-party privacy assessments.