CC

GRC Professional- Data Protection

CICRA Consultancies (Pvt) Ltdjobseeker.lk
Nov 2, 2026, 8:54 AM3h ago
Colombo 07SecurityMid level (3+ yrs)

About the role

CICRA Consultancies is seeking a GRC Professional specializing in Data Protection to design, implement, and maintain robust data protection frameworks for clients, ensuring compliance with PDPA, GDPR, and related standards. The role involves developing data protection policies, conducting DPIAs and risk assessments, advising on data classification and cross-border transfers, supporting DLP and data governance initiatives, and delivering privacy training. Candidates should have 3-5 years of experience in data protection, privacy compliance, or information governance, a relevant degree, and a Certified Data Protection Officer (CDPO) certification. The company offers exposure to high-profile client engagements, a collaborative work culture, professional growth, and competitive remuneration.

Must have

  • Certified Data Protection Officer (CDPO) certification from a recognised body.
  • Degree in IT, Information Security, Law, Compliance, or related field.
  • 3–5 years’ experience in data protection, privacy compliance, or information governance.
  • Strong knowledge of PDPA, GDPR, and related frameworks.
  • Experience with DPIAs, privacy audits, and policy development.
  • Excellent communication and stakeholder-management skills.

Technologies

  • DLP

Highlights

Application deadline is 12th November 2026. The position is based in Colombo 07. Applications should be sent to jobs@cicra.lk. For more information, contact 0710 600 800.