RethinkingWeb
Website:
rethinkingweb.com
Job details:
Location: Thane, Maharashtra (on-site, full-time)
Education: Graduate in IT, Law, Commerce or related discipline
Industry context: Large enterprise, regulated environment
Key Responsibilities
- Maintain data inventory, data flow maps and RoPA across business units and applications
- Handle Data Principal rights requests (access, correction, erasure, grievance) within defined SLAs and maintain closure records
- Support consent notice drafting, consent lifecycle tracking and withdrawal handling
- Conduct privacy impact assessments for new projects, applications and processing changes
- Review vendor and processor contracts for DPDP clauses; track third-party privacy obligations and periodic assessments
- Support personal data breach identification, documentation and reporting within statutory timelines
- Track data retention and deletion schedules; follow up with process owners on overdue items
- Maintain privacy policies, SOPs, registers and audit evidence
- Prepare periodic privacy metrics and management reporting
- Assist in privacy awareness sessions and training records upkeep
Required Skills
- Working knowledge of the DPDP Act 2023 and DPDP Rules, including Data Fiduciary and Significant Data Fiduciary obligations
- Familiarity with ISO 27001 / ISO 27701 control environments
- Strong documentation, evidence management and stakeholder follow-up skills
- Proficient with Excel-based trackers and reporting
Preferred
- Prior BFSI or insurance experience
- Exposure to privacy management or GRC tooling
- Awareness of GDPR for comparative context
Click on Apply to know more.