Senior Privacy Lead

About the role

We are looking for a Senior Privacy Lead to lead privacy, data protection, and regulatory compliance initiatives across Certinal and support enterprise customers with complex privacy requirements.

The role will combine privacy advisory, regulatory interpretation, risk assessment, customer consulting, and product enablement. The ideal candidate should be able to translate privacy regulations into practical business, operational, and technology requirements while working closely with Product, Engineering, Legal, Sales, Implementation, and customer teams.

What you will do

• Lead privacy, data protection, and compliance initiatives across Certinal.
• Interpret and operationalize regulations such as the India DPDP Act, GDPR, CCPA/CPRA, and other applicable privacy frameworks.
• Lead PIAs, DPIAs, privacy risk assessments, gap assessments, audits, and compliance reviews.
• Develop and maintain privacy policies, controls, procedures, documentation, data maps, and Records of Processing Activities.
• Identify privacy risks across products, processes, integrations, and customer implementations and recommend practical remediation measures.
• Work with Product and Engineering teams to embed Privacy by Design and Privacy by Default principles into Certinal's products.
• Translate regulatory requirements into product capabilities, workflows, controls, and technical requirements.
• Act as a privacy advisor to enterprise customers and prospects through discovery sessions, workshops, assessments, and advisory engagements.
• Support Sales and Pre-Sales teams with privacy questionnaires, RFPs, compliance discussions, and customer evaluations.
• Support reviews of privacy clauses, Data Processing Agreements, consent language, notices, and related documentation.
• Monitor regulatory developments and advise internal teams on their impact on Certinal's products and customers.
• Serve as an internal subject matter expert on privacy and data protection.

Required skills & experience

• Strong experience in Privacy, Data Protection, Privacy Consulting, Privacy Compliance, or Privacy Risk Management.
• Strong understanding of privacy principles, data protection requirements, and regulatory frameworks.
• Working knowledge of: India Digital Personal Data Protection Act, GDPR, CCPA/CPRA, and other major global privacy frameworks.
• Hands-on experience conducting PIAs, DPIAs, privacy audits, gap assessments, and privacy risk assessments.
• Experience translating regulatory requirements into operational, technical, or product requirements.
• Understanding of consent management, data principal/data subject rights, data retention, data minimization, purpose limitation, and data governance.
• Strong policy drafting, documentation, and report-writing skills.
• Excellent communication, presentation, and stakeholder management skills.
• Ability to engage confidently with senior stakeholders and enterprise customers.

Preferred qualifications

• Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, DCPP, or equivalent privacy certifications are preferred.
• Experience in privacy consulting, advisory, SaaS, enterprise software, or technology environments.
• Experience working directly with enterprise customers on privacy transformation or compliance programs.
• Experience working with healthcare organizations or healthcare technology is preferred.
• Familiarity with enterprise SaaS architecture, APIs, cloud platforms, and enterprise integrations.
• Understanding of security and compliance frameworks such as ISO 27001, SOC 2, HIPAA, or similar standards is an advantage.

What we are looking for

We are looking for someone who can operate at both a strategic and execution level.

The successful candidate should be able to interpret regulation, advise customers and leadership, conduct detailed privacy assessments, and work closely with technical teams to translate privacy requirements into practical solutions.

The role is particularly suited to someone who enjoys working at the intersection of privacy, technology, product, healthcare, and enterprise consulting and wants to play a key role in building Certinal's privacy and digital trust capabilities.