Security Engineer / Data Privacy Executive

Job Title: Security Engineer / Data Privacy Executive

About the Role

This role involves supporting day-to-day cybersecurity operations and data privacy and compliance activities at the client location, under the guidance of the vCISO / Data Privacy Lead.

Key Responsibilities

• Handling security-related tickets.
• Troubleshooting cybersecurity solutions.
• Escalating unresolved issues to OEM/L2 support.
• Coordinating security activities, including security training, audits, and security governance.
• Facilitating the closure of identified risks with departments.
• Assisting with privacy assessments.
• Maintaining data privacy documentation.
• Coordinating with internal departments for closure of identified gaps.
• Supporting the implementation of applicable data protection requirements, including the Digital Personal Data Protection (DPDP) Act, 2023.
• Assisting in privacy awareness initiatives, audits, data mapping exercises, and overall privacy governance activities.

Requirements & Tech Stack

Must Have

• B.Tech or equivalent qualification.
• Good communication skills (written and verbal).
• Strong interest in building a career in Cybersecurity and Data Privacy.
• Basic understanding of data protection, personal data, and privacy principles.
• Good documentation, coordination, and follow-up skills.

Good to Have

• Basic understanding of cybersecurity fundamentals.
• Awareness of security solutions such as AV, EDR, SOC, and DLP.
• Familiarity with security processes such as VAPT, SOC Monitoring, Security Monitoring, Security Audits, and ISO 27001.
• Knowledge of ITIL-based ticketing processes.
• Basic understanding of Vulnerability Management and VA tools.
• Basic awareness of the Digital Personal Data Protection (DPDP) Act, 2023.
• Familiarity with data privacy concepts such as consent, purpose limitation, data minimisation, data retention, and individual rights.
• Basic understanding of privacy processes such as Data Mapping, Data Inventory, Privacy Impact Assessments (PIA/DPIA), and privacy risk assessments.
• Awareness of data protection frameworks and regulations such as GDPR and ISO 27701.
• Familiarity with information security concepts such as DLP, access controls, data classification, and encryption.
• Exposure to compliance documentation, policy reviews, audit support, and risk tracking.
• Basic understanding of incident reporting and personal data breach management.
• Foundational cybersecurity certifications (CompTIA Security+, CySA+, or equivalent).
• Foundational certifications or training in Data Privacy, GDPR, DPDP, or ISO 27701.