Specialist

Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

• Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
• Assess request validity, identity verification requirements, and applicable legal exemptions
• Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
• Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
• Draft and issue DSAR responses and maintain complete case documentation after review
• Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
• Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
• Support audits, regulatory inquiries, and compliance reviews related to data subject rights
• Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
• Develop and maintain DSAR procedures, playbooks, and knowledge repositories

• 4-7 years of experience in Privacy, Compliance or Data Governance
• Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations
• Strong understanding of data subject rights, data retention, and privacy compliance requirements
• Excellent stakeholder management, analytical, and communication skills
• Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage
• Certification like CIPPE. CIPM is preferrable