Data Privacy Manager - Consultant - Virtusa - Gurgaon, India
(2025-01 - 2026-12)
Maintained enterprise-wide privacy governance, operational compliance, and regulatory alignment across UK, EU, US, APAC, and EMEA jurisdictions, partnering with Legal, Security, Engineering, and business stakeholders.
- Data Subject Rights (DSR) Management: Led the end-to-end lifecycle of access, deletion, correction, and portability requests, coordinating with legal, security, and business teams to ensure timely closure within statutory deadlines while maintaining audit-ready documentation and centralized tracking.
- Customer Contract Privacy Reviews (MSA/DPA/TIA): Led comprehensive privacy and data protection reviews of Master Service Agreements, Data Processing Addendums, and Transfer Impact Assessments, embedding SCCs, cross-border transfer safeguards, and regulatory clauses to ensure GDPR and global data transfer compliance.
- Vendor Onboarding & Third-Party Risk Assessments: Performed privacy due diligence for new and renewing vendors, evaluated processing risks and security controls, and implemented Data Processing Addendums to mitigate third-party exposure.
- DPIA Execution: Executed Data Protection Impact Assessments including high-risk systems and new initiatives, identifying privacy risks, recommending mitigation strategies, and driving remediation to completion with stakeholders.
- RoPA & Data Flow Documentation: Maintained comprehensive Records of Processing Activities and created detailed Data Flow Diagrams to establish an accurate inventory and visualization of enterprise-wide personal data processing.
- LIA (Legitimate Interest Analysis) Management: Perform and document LIAs to assess necessity/balancing tests, define safeguards, and establish defensible lawful basis documentation for processing activities.
- Data Management System Validation: Performed DMS reviews for internal business functions focusing on the validation and formal confirmation of Data Retention and Deletion periods defined within the policies.
- Privacy by Design (PbD): Maintained enterprise PbD guidelines, defining recommended privacy principles, review checklists, and design considerations to guide product teams on compliance expectations for new products, platform changes, and deployments.
- Policy & Framework Management: Designed and updated privacy policies (Website privacy, Enterprise data privacy, Cookie, Data retention archival and Disposal, Government information request policy), SOPs, templates, and governance trackers to ensure documentation remained current, consistent, and aligned with evolving regulations.
- Cookie & Website Compliance: Managed cookie scanning, classification, and remediation processes to maintain adherence to ePrivacy and consent management requirements.
- Training & Awareness Programs: Designed and delivered organization-wide privacy awareness sessions and campaigns, strengthening employee understanding and improving compliance participation rates.
- Compliance Reporting & Dashboards: Developed executive monthly reporting decks presenting KPIs, risk trends, and program maturity insights to leadership and the DPO for informed decision-making.
- Audit & Attestation Support: Supported ISO 27001, SOC 2, and privacy readiness audits by compiling evidence, documenting controls, and performing gap analyses to demonstrate compliance effectiveness. Also contributed for ISO 27701, NIST RMF readiness.
- Governance & Operations Management: Led recurring tracking meetings and operational reviews to monitor open risks, accelerate issue resolution, and enhance accountability across cross-functional teams.
Consultant - Deloitte - Noida, India
(2025-01 - 2025-12)
- Validated an automated personal data discovery tool for a global e-commerce client, assessing PII and sensitive data redaction to strengthen privacy controls.
- Conducted DPIAs for a multinational mining & resources client, delivering risk assessments and compliance recommendations.
- For a global technology & entertainment client, developed gap registers and data flow diagrams to identify compliance gaps and improve accountability.
- Supported an Indian insurance client by reviewing sensitive data processing practices and aligning them with privacy regulations.
- Led internal Deloitte initiatives, including a DPDPA readiness program, Privacy by Design (PbD) assessments, and drafting standardized privacy policy templates for firm-wide deployment.
- Collaborated with cross-functional teams to embed privacy by design into projects and advised stakeholders on evolving global privacy regulations.
Assistant Professor - Manav Rachna University - Faridabad, India
(2024-01 - 2024-12)
- Designed and delivered lectures on Company Law, Criminal Justice, and Evidence Law, embedding discussions on data protection and corporate governance in the digital era.
- Guided postgraduate research on privacy law, data protection frameworks, and governance models, mentoring students in applying regulatory frameworks such as GDPR and DPDPA.
- Organized seminars on data governance, AI in law, and compliance readiness, bridging academic insights with practical regulatory challenges.
Research Intern - Vidhi Centre for Legal Policy - New Delhi, India
(2024-01 - 2024-12)
- Conducted research on privacy and governance of sensitive health data in pharmaceutical regulation and pandemic law contexts.
- Drafted policy briefs on data protection, compulsory licensing, and regulatory compliance, contributing to national-level legal reform discussions.
- Assessed data governance mechanisms for balancing patient privacy rights with public health objectives, shaping policy recommendations.
Assistant Professor - Maharaj Vinayak Global University - Jaipur, India
(2021-01 - 2023-12)
- Constitutional Law, Criminal Law, and Legal Research Methodology: Spearheaded curriculum development and delivered specialized courses, Engaged in scholarly research with a focus on Constitutional Amendments and their impact on Individual Rights.
Guest Faculty - Rajasthan University - Jaipur, India
(2021-01 - 2022-12)
- Constitutional and Contract Law: Contributed to the academic environment by delivering lectures and workshops, Mentored students, and facilitated their understanding of complex legal concepts.
Independent Legal Practice - Rajasthan High Court & District and Sessions Court - Jaipur, India
(2019-01 - 2021-12)
- Represented and advised clients in civil and criminal proceedings, including contract disputes, property matters, and criminal defense cases. Managed end-to-end case lifecycles — from client consultation and strategy formulation to drafting petitions, written submissions, and pleadings.
- Appeared regularly before the District & Sessions Courts and assisted in cases escalated to the Rajasthan High Court, gaining practical expertise in litigation, procedural law, and courtroom advocacy.
- Conducted comprehensive legal research and due diligence, leveraging statutory interpretation, case law analysis, and precedent-based arguments to strengthen client positions.
- Negotiated with opposing counsel, liaised with court staff, and ensured timely filing and compliance with procedural requirements, building a reputation for precision and reliability.
- Developed strong client relationship management skills, providing clear legal opinions, risk assessments, and strategic guidance to individuals and businesses facing legal challenges.
