About the Role
As a Privacy Consultant at IQWorks, you will be the privacy expert our enterprise clients rely on. You will interpret DPDP, GDPR, and PDPL obligations for real businesses, translate them into practical compliance programs, and operationalize those programs in ComplyIQ, ConsentIQ, and the wider IQWorks platform. You will run assessments and gap reviews, build records of processing, shape consent and notice frameworks, stand up data principal rights processes, and work alongside client teams to get the work done rather than hand over a slide deck. This is a client-facing role based in Delhi, with regular local travel to client sites. We are looking for a technology generalist as much as a privacy specialist — you do not need to write code, but you should be comfortable with how data, systems, and applications fit together, because privacy advice that ignores the technology rarely survives an implementation. We support hybrid working and flexible hours, and we look for people who bring the consistency and responsiveness that client work depends on. This is a high-ownership role with room to grow into leading a privacy practice as we scale.
What You Will Do
- Advise enterprise clients on DPDP, GDPR, PDPL, and adjacent regulations, translating obligations into practical compliance programs
- Run privacy assessments, gap analyses, and readiness reviews, and turn the findings into prioritized remediation plans
- Build and maintain records of processing, data inventories, and data-flow mapping alongside client teams
- Design consent, privacy notice, and data principal rights processes, and stand them up in the IQWorks platform
- Lead client implementations — configure ComplyIQ, ConsentIQ, and related products to match each client’s obligations and workflows
- Support DPIAs, vendor and third-party assessments, and breach response readiness
- Act as the trusted privacy advisor on your accounts, running workshops and business reviews with legal, compliance, security, and IT stakeholders
- Travel locally to client sites across Delhi and the NCR, and to other Indian metros as engagements require
- Feed regulatory and client insights back into product so the platform reflects how compliance actually gets done
What We Are Looking For
- 2+ years of relevant privacy experience — privacy consulting, data protection, compliance, or an in-house privacy or DPO function
- Deep working knowledge of India’s DPDP Act, the GDPR, and the PDPL regimes in the UAE and Saudi Arabia, including where their obligations overlap and where they diverge
- Proven ability to turn regulation into operational programs rather than legal memos
- Strong technology fundamentals — comfortable reasoning about data, applications, databases, and integrations; no coding experience required
- Excellent communication and presentation skills — you can hold a room with legal, compliance, security, and IT stakeholders
- Comfort owning client relationships end to end, from scoping through delivery and ongoing advisory
- Effective use of AI as a force multiplier across the privacy workflow — regulatory research, assessment drafting, policy and notice preparation, and client reporting — with sharp judgment about where human oversight is essential so accuracy and client trust are never compromised
- Based in Delhi or the NCR, with willingness to travel locally to client sites
- Available to join immediately or on a short notice period
- Self-starter who thrives in a fast-paced, ambiguous startup environment
Nice to Have
- Privacy certification such as CIPP/E, CIPM, CIPT, or DCPP
- Experience serving as, or directly supporting, a Data Protection Officer
- Working knowledge of additional regimes such as HIPAA, CCPA, or sector guidance from regulators like RBI and IRDAI
- Hands-on experience with privacy management, consent management, or GRC platforms
- Experience implementing or deploying enterprise software at customer sites
- Familiarity with security and governance frameworks such as ISO 27001 or SOC 2
- Technical fluency — SQL, APIs, or basic scripting — enough to reason about where personal data lives and how it moves
- Prior experience at a consulting firm, or as an early hire at a high-growth startup