Data Protection Specialist

POSITION DETAILS

Position: Data Protection Specialist

Experience: 3 to 10+ Years

Employment Mode: Retainer / Consultant / Contract-to-Hire

Notice Period: Immediate – 45 Days

Benefits: Visa, Accommodation, Per Diem, To & Fro Flight Tickets

The Data Protection Specialist must have a minimum of 3+ years of hands‑on experience in data governance, data privacy regulatory compliance, and the implementation of data protection controls. This candidate will drive data classification, data loss prevention (DLP), encryption, and privacy programme management across enterprise environments.

• Microsoft Purview / Azure Information Protection (AIP)
• Symantec / Broadcom Data Loss Prevention (DLP)
• Forcepoint DLP
• Varonis Data Security Platform
• One Trust / Trust Arc Privacy Management
• Informatica Data Privacy / Axon

• Design and implement enterprise Data Loss Prevention (DLP) policies across endpoints, networks, and cloud.
• Classify and label sensitive data in accordance with organisational and regulatory requirements.
• Implement encryption strategies for data at rest, in transit, and in use.
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Ensure compliance with applicable data protection regulations including GDPR, CCPA, PDPA, and regional frameworks.
• Integrate data protection controls with IAM, SIEM, and CASB platforms.
• Develop and maintain data retention, deletion, and lifecycle management policies.

• Deep understanding of data privacy laws and regulatory requirements across multiple jurisdictions.
• Ability to perform data flow mapping, data inventory management, and privacy impact analysis.
• Strong documentation and report writing skills for regulatory and executive audiences.
• Experience developing and delivering data privacy awareness and training programmes.
• Proficiency in collaborating with Legal, Compliance, IT, and Business stakeholders.
• Ability to prioritise and manage data protection incidents, breaches, and subject access requests (SARs).

• Develop, implement, and maintain the enterprise Data Protection and Privacy programme.
• Deploy and manage DLP, encryption, and data classification technologies across the organisation.
• Conduct periodic privacy audits, control testing, and compliance assessments.
• Respond to and manage data breach incidents in line with regulatory notification obligations.
• Maintain records of processing activities (RoPA) and data asset inventories.
• Advise business units on privacy‑by‑design principles for new projects and systems.
• Liaise with regulators, third‑party vendors, and internal stakeholders on data protection matters.

Bachelor's degree in Computer Science, Information Systems, Law, or a related discipline; or 3+ years of experience in a data protection or privacy role within an enterprise environment. Certifications such as CIPP/E, CIPP/US, CIPM, CIPT (IAPP), or ISO 27701 Lead Implementer are highly desirable.