The Role
Supports data privacy, data protection, cyber law, cybersecurity, and GRC engagements. Responsibilities include privacy assessments, PIA/DPIA, RoPA, data-flow mapping, regulatory research, policy reviews, control mapping, audit evidence collection, client information gathering, and preparation of compliance reports and documentation.
Summary Generated by Built In
Job Summary:
The Associate Consultant / Trainee will support the delivery of Data Privacy, Data Protection, Cyber Law, Cybersecurity and GRC engagements. This role is suitable for freshers and candidates with 0 – 2 years of experience who have an academic or professional background in Law, Cyber Law, Cybersecurity or Information Security. The candidate will work with experienced consultants to support privacy assessments, regulatory research, risk assessments, documentation and compliance activities. Knowledge of Cyber Law and Cybersecurity will be an added advantage.
Key Responsibilities:
- Support Data Privacy and Data Protection assessments, including Privacy Gap Assessments, against applicable laws and regulations.
- Assist with PIA, DPIA, RoPA and Data Flow Mapping activities.
- Support review of privacy policies, procedures, privacy notices, consent, data retention and data subject rights.
- Research applicable regulations including DPDP Act, GDPR, PDPA and other relevant requirements.
- Support the team in understanding Cyber Law, Cybersecurity and Information Security requirements and emerging cyber risks.
- Assist in mapping legal and regulatory requirements to applicable privacy and cybersecurity controls.
- Support review of basic cybersecurity controls relating to access management, data security, encryption, vulnerability and incident management.
- Support privacy and compliance assessments, including collection and review of client information, documents and audit evidence.
- Support consultants in client engagements, meetings and information-gathering sessions.
- Assist in preparing assessment reports, compliance checklists, trackers, presentations and other supporting documentation.
Qualifications:
- Integrated B.Tech + LLB, Bachelor’s degree in Law, Cyber Law, Cybersecurity, Information Security, Computer Science, IT or a related field.
- Candidates with a combination of Law and Cybersecurity / Information Security background will be an advantage.
- Relevant internships, academic projects or training in Data Privacy, Cyber Law, Cybersecurity, IT GRC or Compliance will be preferred.
Work Experience:
- Freshers and candidates with 0–2 years of experience in Data Privacy, Cybersecurity, Cyber Law, IT GRC, IT Audit, Risk or Compliance.
- Good understanding of data privacy principles and regulatory requirements.
- Ability to read and understand laws, regulations and regulatory guidelines.
- Basic understanding of Cyber Law, Cybersecurity and Information Security concepts.
- Understanding of the relationship between legal requirements, privacy obligations and cybersecurity controls.
- Good research, analytical and problem-solving abilities.
- Good written and verbal communication skills.
- Ability to prepare clear documentation and reports.
- Willingness to learn and develop expertise in Data Privacy, Cybersecurity and GRC.
- Cyber Law and Cybersecurity knowledge will be an added advantage.
- Exposure to DPDP Act, GDPR, PCI DSS, ISO 27001 or ISO 27701 will be preferred.
- Attention to detail and ability to work with documentation and assessment evidence.
- Ability to manage assigned tasks and complete deliverables within timelines.
- Industry Certification will be an be plus: DCPP, CIPP, AIGP, ISO 27001, Security+, CEH, CCNA or other relevant certifications will be an advantage.
- Tools Exposure: Exposure to Data Privacy or GRC tools such as OneTrust, BigID, TrustArc or similar platforms will be an advantage.
Skills Required
- Integrated B.Tech and LLB, or a bachelor’s degree in Law, Cyber Law, Cybersecurity, Information Security, Computer Science, IT, or a related field
- Freshers or candidates with 0–2 years of experience in data privacy, cybersecurity, cyber law, IT GRC, IT audit, risk, or compliance
- Good understanding of data privacy principles and regulatory requirements
- Ability to read and understand laws, regulations, and regulatory guidelines
- Basic understanding of cyber law, cybersecurity, and information security concepts
- Understanding of the relationship between legal requirements, privacy obligations, and cybersecurity controls
- Good research, analytical, and problem-solving abilities
- Good written and verbal communication skills
- Ability to prepare clear documentation and reports
- Willingness to learn and develop expertise in data privacy, cybersecurity, and GRC
- Attention to detail and ability to work with documentation and assessment evidence
- Ability to manage assigned tasks and complete deliverables within timelines
- Combination of Law and Cybersecurity or Information Security background
- Relevant internships, academic projects, or training in data privacy, cyber law, cybersecurity, IT GRC, or compliance
- Exposure to DPDP Act, GDPR, PCI DSS, ISO 27001, or ISO 27701
- Industry certification such as DCPP, CIPP, AIGP, ISO 27001, Security+, CEH, CCNA, or another relevant certification
- Exposure to data privacy or GRC tools such as OneTrust, BigID, TrustArc, or similar platforms
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
