POSITION DETAILS

Position: Data Privacy Consultant

Experience: 3 to 10+ Years

Employment Mode: Retainer / Consultant / Contract-to-Hire

Notice Period: Immediate – 45 Days

Benefits: Visa, Accommodation, Per Diem, To & Fro Flight Tickets

ROLE OVERVIEW

The Data Privacy Consultant must have a minimum of 3+ years of experience advising organisations on data privacy strategy, regulatory compliance, and the operationalisation of privacy frameworks. This candidate will work closely with Legal, IT, and Business stakeholders to build and sustain a privacy-by-design culture and ensure compliance with applicable global and regional data protection laws.

REGULATORY & FRAMEWORK EXPERTISE (ANY OF THE FOLLOWING)

• General Data Protection Regulation (GDPR) — EU/UK
• California Consumer Privacy Act (CCPA) / CPRA
• Personal Data Protection Act (PDPA) — Singapore / Thailand
• Digital Personal Data Protection Act (DPDP) — India
• ISO 27701 Privacy Information Management System
• NIST Privacy Framework
• SAMA Cybersecurity Framework — Data Privacy Controls

REQUIRED SKILLS & EXPERIENCE

• Advise organisations on compliance with applicable data privacy laws and regulatory requirements.
• Conduct privacy gap assessments, data mapping exercises, and Records of Processing Activities (RoPA) reviews.
• Develop, implement, and maintain privacy policies, notices, consent frameworks, and data subject rights procedures.
• Perform Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) for new processing activities.
• Advise on cross-border data transfer mechanisms including Standard Contractual Clauses (SCCs) and Binding Corporate Rules (BCRs).
• Support clients in managing data subject access requests (DSARs), erasure requests, and regulatory enquiries.
• Review and negotiate data processing agreements (DPAs) and third-party vendor privacy clauses.

CRITICAL SKILLS

• In-depth knowledge of global and regional data privacy regulations and their practical application.
• Strong legal comprehension and ability to translate regulatory requirements into actionable operational controls.
• Excellent written communication skills for drafting policies, privacy notices, and regulatory submissions.
• Ability to manage competing client priorities across multiple concurrent engagements.
• Collaborative approach to engaging Legal, Compliance, IT Security, and Business Operations teams.
• Analytical mindset with the ability to identify and prioritise privacy risks in complex data environments.

RESPONSIBILITIES

• Deliver end-to-end data privacy consulting engagements from assessment through to implementation and sustainability.
• Develop and maintain client privacy programme documentation including policies, procedures, and registers.
• Support the operationalisation of Privacy by Design and Privacy by Default principles in client projects.
• Advise on incident response, data breach notification obligations, and regulatory reporting procedures.
• Manage and support DPO (Data Protection Officer) functions on behalf of clients where required.
• Build and maintain strong client relationships, providing ongoing advisory and compliance monitoring support.
• Stay current with evolving privacy legislation, regulatory guidance, and enforcement trends globally.

BASIC QUALIFICATIONS

Bachelor’s degree in Law, Information Systems, Computer Science, or a related field; or 3+ years of experience in data privacy consulting, legal, or compliance roles. Certifications such as CIPP/E, CIPP/US, CIPM, CIPT (IAPP), or ISO 27701 Lead Implementer are strongly preferred.