Senior Specialist
EXL · Noida, Uttar Pradesh · Full-time
Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.
• Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
• Assess request validity, identity verification requirements, and applicable legal exemptions
• Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
• Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
• Draft and issue DSAR responses and maintain complete case documentation after review
• Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
• Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
• Support audits, regulatory inquiries, and compliance reviews related to data subject rights
• Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
• Develop and maintain DSAR procedures, playbooks, and knowledge repositories
Bachelor�s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) preferred. 6 - 9 years of experience in Data Privacy or cybersecurity operations