LawSikho

Deadline 15-11-2026

Location Bengaluru, Karnataka, India

Details of the Organization

Dutient is a next-generation consulting and solutions partner pioneering the convergence of Data Privacy, Cybersecurity, AI Governance, and IT Operations. We enable enterprises to build trust-driven, AI-empowered ecosystems by offering a full-stack suite of advisory and managed services across compliance, security, and responsible AI.

Dutient’s platform and consulting practices deliver one-stop solutions across regulatory and operational needs—covering Privacy Impact Programs, Regulatory Gap Assessments, Security Architecture Reviews, AI Governance Frameworks, Responsible AI Audits, Vulnerability & Penetration Testing, IT Operations Outsourcing, and AI-driven Risk Management. With in-house innovations around AI-augmented compliance agents, automated DPIAs, privacy dashboards, and secure agentic workflows, Dutient transforms compliance from a burden into a competitive advantage.

We partner with organizations across India, the Middle East, Southeast Asia, and the US, helping sectors such as BFSI, manufacturing, insurance, social media, SaaS, e-commerce, and healthcare navigate complex regulations including GDPR, DPDPA, NIST, ISO, ADHICS, NESA, and sectoral standards.

Details of the Job/Internship

Location: Bengaluru, Pune & Delhi NCR

We are looking for a Senior Data Protection Consultant to join our growing Privacy Consulting practice. You will turn the Digital Personal Data Protection Act (DPDPA), the IT Act and global frameworks such as GDPR and CCPA/CPRA into practical, engineering-friendly action. You will run privacy assessments, build RoPAs and data inventories, conduct DPIAs, shape data privacy agreements and Data Fiduciary to Data Processor arrangements, and work with product and technology teams to make sure privacy requirements are actually implemented in systems and processes, not just documented

Role and Responsibilities

Interpret the DPDPA, the IT Act and global regulations such as GDPR and CCPA/CPRA for client engagements and advise on obligations.
Support and lead privacy maturity assessments, gap assessments, compliance reviews and privacy health checks across industry verticals.
Support GDPR and DPDPA compliance work, including cross-border transfer assessments and mapping obligations across both regimes.
Develop practical remediation roadmaps and client-facing privacy advisory deliverables.
Track regulatory developments and keep Dutient's frameworks, templates and automated privacy tooling current.
Build and maintain Records of Processing Activities (RoPA) and data inventories, mapping personal data flows across systems, vendors and business functions.
Conduct data discovery, data mapping and data flow assessments to identify personal data processing activities.
Conduct and support DPIAs, PIAs, Legitimate Interest Assessments (LIAs), Transfer Impact Assessments (TIAs) and privacy risk assessments, documenting risks, likelihood, impact and mitigations.
Draft policies, standards, procedures and privacy notices, and support privacy governance frameworks and operational controls.
Support Privacy by Design and Privacy by Default across business processes and technology platforms.
Work with technical teams to embed privacy into technology operations, including consent management, data retention, access controls, data subject rights handling and breach response.
Draft, review and negotiate data privacy agreements, including Data Processing Agreements (DPAs), Data Sharing Agreements (DSAs), Standard Contractual Clauses (SCCs), NDAs and vendor contracts.
Structure Data Fiduciary to Data Processor relationships.
Conduct vendor privacy assessments and third-party risk reviews to evaluate processor compliance.
Advise clients on cross-border data transfers and international privacy obligations.

Required Skills and Experience

2 to 5 years of experience in Data Privacy, Data Protection, Privacy Consulting, Information Security Compliance or Regulatory Compliance.
Sound understanding of the DPDPA, including the roles of Data Fiduciary, Data Processor and Data Principal and the obligations between them.
Working knowledge of GDPR (data subject rights, lawful basis, cross-border transfers, SCCs) and familiarity with the IT Act; exposure to CCPA/CPRA or other global privacy regulations; exposure to ISO 27701 is a plus.
Hands-on ability to create RoPAs and data inventories and to work on DPIAs, PIAs, TIAs, LIAs and data mapping.
Understanding of how data privacy agreements are created (DPAs, SCCs, NDAs, MSAs, SOWs) and what clauses matter in practice.
Understanding of privacy governance, consent management, data lifecycle management and third-party risk management.
Understanding of how privacy is embedded into technological operations and technical implementation, with the ability to speak to engineers in their language

Eligibility

2–5 Years

Employment Type: Full-Time

Immediate Joiners or candidates serving a notice period of up to 15 days will be preferred.

Bachelor's degree in Law, Computer Science, Information Security, Engineering, or a related discipline.
LLB/LLM, B.Tech, B.E., MCA, or equivalent qualifications are preferred.
Candidates with a background in Privacy, Cybersecurity, Risk, or Compliance Consulting will be given preference.