GRC & Data Privacy Analyst
Atlas Consolidated
Date: 4 hours ago
City: Hyderabad, Telangana
Contract type: Full time
Role Overview
We are seeking a detail-oriented GRC & Data Privacy Analyst to join our security team. In this role, you will be responsible for maintaining our integrated risk management framework while taking a lead role in implementing and auditing our data privacy program. You will ensure that our operations remain compliant with global regulations (GDPR, PDPA, etc.) while identifying and mitigating risks across the organization.
Key Responsibilities
Governance & Risk Management
We are seeking a detail-oriented GRC & Data Privacy Analyst to join our security team. In this role, you will be responsible for maintaining our integrated risk management framework while taking a lead role in implementing and auditing our data privacy program. You will ensure that our operations remain compliant with global regulations (GDPR, PDPA, etc.) while identifying and mitigating risks across the organization.
Key Responsibilities
Governance & Risk Management
- Framework Alignment: Maintain and mature the organization’s security framework (e.g., ISO 27001, SOC 2 and Singapore MAS).
- Risk Assessments: Conduct annual and project-based risk assessments; maintain the Corporate Risk Register and track remediation efforts.
- Policy Management: Draft, review, and update internal security policies and standards to ensure they reflect current business processes.
- Third-Party Risk Management (TPRM): Evaluate the security posture of vendors and partners through assessments and due diligence reviews.
- Privacy Impact Assessments (PIAs/DPIAs): Lead the evaluation of new products or processes to ensure "Privacy by Design" is integrated into the development lifecycle.
- Data Mapping: Maintain a comprehensive record of processing activities (ROPA) and data flow diagrams.
- Privacy Operations: Manage the Data Subject Access Request (DSAR) process and coordinate responses to privacy-related inquiries.
- Compliance Monitoring: Monitor changes in global privacy laws and translate them into actionable technical or procedural requirements for the IT and Product teams.
- Internal Audits: Perform regular control testing to ensure ongoing compliance with internal policies and external regulations.
- External Audit Liaison: Serve as the primary point of contact for external auditors during certification cycles.
- Awareness Training: Develop and deliver training content on security best practices and data handling requirements for all employees.
- Experience: 8 - 10 years in GRC, Information Security, or IT Audit, with at least 2–4 years specifically focused on Data Privacy.
- Certifications (Preferred): CISA, CRISC, or CISM.
- Technical Skills: Familiarity with GRC tools (Sprinto) and a solid understanding of cloud security (AWS).
- Regulatory Knowledge: Deep understanding of GDPR, PDPA, and industry standards like ISO 27001, SOC 2 and Singapore MAS
- The "Translator" Ability: Can explain complex legal requirements to developers and technical risks to executives.
- Analytical Rigor: A passion for documentation and a "trust but verify" mindset.
- Adaptability: Comfortable navigating the gray areas of emerging privacy legislation.
How to apply
To apply for this job you need to authorize on our website. If you don't have an account yet, please register.
Post a resumeSimilar jobs
Senior Interior Designer
Interazzo.com,
Hyderabad, Telangana
5 hours ago
Job descriptionPosition - Sr. Interior DesignerLocation- HyderabadCompany DescriptionInterazzo.com is a technology-led home-design company based in Bengaluru. We offer standardized, branded, and budget-friendly interior solutions to make quality interiors easy and affordable. Our services include designing your living space with our standardized solutions, providing free doorstep visit, design, and installation, ensuring convenience and hassle-free semi-furnishing of your home. We promise transparency...
ASIC Front-End Methodology Engineer
AMD,
Hyderabad, Telangana
8 hours ago
ADVANCE YOUR CAREER. ADVANCE THE WORLD. At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every...
Principal Digital Verification Engineer (Memory Interface IP- HBM/DDR/LPDDR)
Synopsys Inc,
Hyderabad, Telangana
2 days ago
Job Title:Principal Digital Verification Engineer (Memory Interface IP- HBM/DDR/LPDDR)We AreSynopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering...
