Data Privacy Specialist - HIPAA/ISMS (4-12 yrs)

Job Description : Data Privacy Specialist (Senior Consultant, Deputy Manager, Manager, Senior Manager)

Location : Mumbai

Experience Required : 4+ years

Job Levels : Deputy Manager, Manager, Senior Manager

Responsibilities :

Regulatory Compliance :

- Ensure compliance with global data privacy regulations, including GDPR, CCPA, HIPAA, and other relevant laws.

- Monitor changes in data privacy regulations and update policies accordingly.

- Conduct regular audits to ensure compliance with data privacy standards.

ISO 27001 and ISMS Implementation :

- Implement and maintain Information Security Management Systems (ISMS) in accordance with ISO 27001 standards.

- Develop, implement, and monitor policies and procedures to ensure the security and privacy of data.

- Conduct risk assessments and manage mitigation strategies.

Data Privacy Strategy :

- Develop and implement data privacy strategies and frameworks.

- Lead data privacy impact assessments (DPIAs) and provide recommendations for risk mitigation.

- Establish and maintain data privacy policies, guidelines, and best practices.

Training and Awareness :

- Conduct training sessions and workshops to raise awareness about data privacy and security across the organization.

- Develop training materials and resources for staff at all levels.

Incident Management :

- Lead incident response activities for data breaches and other security incidents.

- Coordinate with legal, IT, and other relevant teams to manage incidents and mitigate risks.

Client Engagement :

- Work with clients to assess their data privacy needs and provide tailored solutions.

- Assist in the development of proposals and presentations for potential clients.

Qualifications:

Education :

- Bachelor's degree in Information Technology, Computer Science, Law, or a related field.

- Relevant certifications such as CIPP/E, CIPM, CIPT, ISO 27001 Lead Implementer, or similar.

Experience :

- Minimum of 3 years of experience in data privacy and security roles.

- Proven experience in implementing and managing ISO 27001 and ISMS.

- In-depth knowledge of global data privacy regulations (e.g., GDPR, CCPA, HIPAA).

Skills :

- Strong analytical and problem-solving skills.

- Excellent communication and interpersonal skills.

- Ability to work independently and as part of a team.

- Strong project management skills with the ability to handle multiple projects simultaneously.