LawSikho

Deadline 12-11-2026

Location Mumbai, Maharashtra, India

Details of the Organization

Dutient is a next-generation consulting and solutions partner pioneering the convergence of Data Privacy, Cybersecurity, AI Governance, and IT Operations. We enable enterprises to build trust-driven, AI-empowered ecosystems by offering a full-stack suite of advisory and managed services across compliance, security, and responsible AI.

Dutient’s platform and consulting practices deliver one-stop solutions across regulatory and operational needs—covering Privacy Impact Programs, Regulatory Gap Assessments, Security Architecture Reviews, AI Governance Frameworks, Responsible AI Audits, Vulnerability & Penetration Testing, IT Operations Outsourcing, and AI-driven Risk Management. With in-house innovations around AI-augmented compliance agents, automated DPIAs, privacy dashboards, and secure agentic workflows, Dutient transforms compliance from a burden into a competitive advantage.

We partner with organizations across India, the Middle East, Southeast Asia, and the US, helping sectors such as BFSI, manufacturing, insurance, social media, SaaS, e-commerce, and healthcare navigate complex regulations including GDPR, DPDPA, NIST, ISO, ADHICS, NESA, and sectoral standards.

Details of the Job/Internship

Location: Mumbai (Onsite)

We are looking for a highly motivated Senior Data Protection Consultant to join our growing Privacy Consulting practice. The ideal candidate will have hands-on experience in implementing privacy programs, conducting privacy assessments, advising clients on global privacy regulations, and driving enterprise-wide data protection initiatives.

This role offers the opportunity to work with leading organizations across BFSI, Healthcare, Retail, Manufacturing, Technology, E-commerce, and other industries, delivering strategic privacy consulting engagements while helping organizations establish mature privacy governance frameworks.

Role and Responsibilities

Lead end-to-end privacy consulting engagements across multiple industry verticals.
Advise clients on global privacy regulations including DPDPA, GDPR, CCPA/CPRA etc
Conduct privacy maturity assessments, gap assessments, compliance reviews, and privacy health checks.
Develop practical remediation roadmaps to address regulatory and operational privacy risks.
Design and implement enterprise privacy governance frameworks, policies, standards, procedures, and operational controls.
Conduct data discovery, data mapping, and data flow assessments to identify personal data processing activities.
Prepare and maintain Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs), Data Protection Impact Assessments (DPIAs)
Support clients in implementing Privacy by Design and Privacy by Default principles across business processes and technology platforms.
Assist organizations in developing privacy notices, consent management frameworks, data retention policies, breach response procedures, and data subject rights processes.
Draft, review, and negotiate privacy-related contractual documents, including Data Processing Agreements (DPAs), Data Sharing Agreements (DSAs), Standard Contractual Clauses (SCCs), Non-Disclosure Agreements (NDAs), and vendor contracts.
Conduct vendor privacy assessments and third-party risk reviews to evaluate processor compliance.
Advise clients on cross-border data transfers and international privacy obligations.
Identify privacy and compliance risks across business operations and recommend practical mitigation strategies.
Support privacy incident investigations, breach assessments, regulatory notifications, and remediation planning.
Assist clients during regulatory inspections, privacy audits, certification exercises, and compliance reviews.
Engage with Legal, Compliance, Information Security, Risk, HR, Product, Procurement, and Business teams to embed privacy controls across the organization.
Conduct stakeholder workshops, executive presentations, and privacy awareness sessions.

Required Skills and Experience

3-5 years of experience in Data Privacy, Data Protection, Privacy Consulting, Information Security Compliance, or Regulatory Compliance.
Strong working knowledge of DPDPA, GDPR, and one or more global privacy regulations.
Hands-on experience in conducting RoPA, DPIA, PIA, TIA, LIA, data mapping, and privacy assessments.
Experience in drafting and reviewing DPAs, SCCs, NDAs, MSAs, SOWs, and other commercial agreements.
Strong understanding of privacy governance, consent management, data lifecycle management, and third-party risk management.
Excellent analytical, communication, stakeholder management, and presentation skills.

Eligibility

3–5 Years

Employment Type: Full-Time

Immediate Joiners or candidates serving a notice period of up to 15 days will be preferred.

Bachelor's degree in Law, Computer Science, Information Security, Engineering, or a related discipline.
LLB/LLM, B.Tech, B.E., MCA, or equivalent qualifications are preferred.
Candidates with a background in Privacy, Cybersecurity, Risk, or Compliance Consulting will be given preference.