Asks for

The ad says“Experience working with Agile/Scrum and SDLC/DevSecOps environments.”
The ad says“Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.”
The ad says“Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.”
The ad says“Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.”
The ad says“Experience working with Agile/Scrum and SDLC/DevSecOps environments.”
The ad says“Strong hands-on experience with UK GDPR and data privacy programs.”

Company Description

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.
The world is how we shape it.

Job Description

Experience Required: 06-08 years
Work Location: Chennai / Bangalore
Mode of work: Hybrid
Shift Timing: UK Shift

Key Responsibilities

Lead end-to-end technical programs focused on GDPR and data privacy.
Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
Support privacy incident response, audits, compliance assessments, and remediation.
Manage third-party/vendor privacy risks and data protection requirements.
Track program KPIs and provide regular updates to senior leadership.
Drive Privacy by Design and Privacy by Default across technology initiatives.

Must-Have Skills

Strong hands-on experience with UK GDPR and data privacy programs.
Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
Experience managing technical programs involving privacy, compliance, or data protection.
Strong stakeholder, risk, dependency, and governance management skills.
Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.
Experience working with Agile/Scrum and SDLC/DevSecOps environments.
Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.

Good to Have

Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
Experience with regulatory audits and third-party privacy assessments.

Qualifications

## Required Qualifications

* Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field.

* 5–8+ years of experience in Leading the Technical Program or IT Program Management.

* 3+ years of experience delivering privacy or compliance programs.

* Experience working with engineering and security teams.

* Experience managing enterprise-scale technical programs.

## Preferred Certifications

* Certified Information Privacy Manager (CIPM)

* Certified Information Privacy Professional – Europe (CIPP/E)

* Certified Information Privacy Technologist (CIPT)

* ISO/IEC 27001 Lead Implementer or Lead Auditor

* Certified Information Systems Security Professional (CISSP)

Additional Information

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.