Data Protection Specialist.
This mandate is run by SYMPHONI HR, a Mumbai-based executive search firm, est. 2003. Applications are email-verified and reach the search team running the role — confidentially, always.
About the organisation.
Our client is a leading global financial services organisation with a large international footprint and a strong commitment to regulatory excellence. They operate at significant scale across multiple markets and serve institutional and individual clients worldwide. The culture emphasises collaboration across distributed teams, responsible handling of personal data, and continuous improvement of governance practices.
About the role.
This role sits within the data protection function and is responsible for ensuring the organisation meets UK and EU GDPR obligations across its business activities. The successful candidate will advise business stakeholders on privacy requirements, manage data subject rights and breach processes, and drive privacy-by-design practices. The role requires close partnership with teams across regions to embed consistent, risk-based privacy controls.
What you will do.
- Advise business and technology teams on UK GDPR and EU GDPR obligations across new and existing processing activities
- Draft, review and maintain privacy policies, procedures, and privacy notices
- Coordinate the management of personal data breaches, including assessment, escalation, and regulatory notification
- Handle data subject rights requests in line with statutory timelines and internal standards
- Support privacy by design reviews and privacy impact assessments for new initiatives
- Assess international data transfer mechanisms and maintain compliance with transfer requirements
- Conduct privacy assessments of vendors and third-party service providers
- Maintain records of processing activities and support regulatory audits and inquiries
- Drive change management and privacy awareness across distributed organisational teams
What you bring.
- 5 to 8 years of experience in data protection, privacy, or a closely related compliance role
- Strong working knowledge of UK GDPR and EU GDPR and related data protection legislation
- Proven experience drafting privacy policies, procedures, and privacy notices
- Hands-on experience with data breach management and data subject rights request handling
- Experience with international data transfer compliance and third-party privacy assessments
- CIPP/E certification or willingness to obtain it
- Legal qualification or equivalent professional background in law or regulatory compliance
- Excellent written and verbal communication skills with the ability to influence stakeholders at all levels
Other open roles.
Director – Technology GRC — Mumbai · Hybrid
Oracle Fusion Technical Specialist with AI Experience — Bengaluru · Hybrid
Python Developer — Mumbai · Hybrid