Information Security and Privacy Consultant

We are seeking a Information Security and Privacy consultant to help our clients design, implement, and manage privacy frameworks aligned with the Digital Personal Data Protection (DPDP) Act, 2023 and ISO/IEC 27701 standards. The consultant will be responsible for assessing privacy risks, advising on compliance requirements, and supporting implementation of privacy controls within the client’s business processes, IT systems, and governance structures.

Key Responsibilities:

Risk & Compliance Management

Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs).

Identify and mitigate privacy and data protection risks.

Align privacy program with client’s existing Information Security Management System (ISMS).

Help identify and implement privacy management tools as per the client requirements 

Governance & Documentation

Develop roles, responsibilities, and accountability structures (e.g., Data Fiduciary, Data Processor, DPO support).

Support creation and maintenance of evidence/documentation for compliance audits and certifications.

Prepare clients for external audits (ISO 27701 certification, regulatory checks).

Training & Awareness

Conduct privacy training and awareness sessions for employees and stakeholders.

Build a privacy-aware culture within client organizations.

Advisory & Ongoing Support

Provide expert advice on emerging privacy regulations in India and globally.

Support incident response planning and personal data breach management.

Act as a trusted advisor to senior leadership on privacy-related decisions.

Qualifications:

Bachelor’s degree in IT or a related field.

Excellent communication and leadership abilities.

Minimum 2 -3 yrs experience in privacy and cybersecurity