Open to opportunities

Neetu Verma

@neetuverma1

Message

I lead enterprise privacy programs, bridging DPDPA and global GDPR compliance.

India

Message

What I'm looking for

I’m looking to lead enterprise privacy strategy and DPO-level governance—architecting ISO 27701/PIMS, driving DPDPA/GDPR compliance, and delivering board-ready risk reporting with hands-on privacy tech implementation.

I’m an accomplished Data Privacy & Compliance leader with 11 years of experience architecting, governing, and executing enterprise-wide privacy programs across complex, multi-sector global environments. I serve as the trusted DPO-level point of contact for organizations navigating cross-jurisdictional compliance.

I design privacy governance that holds up under scrutiny—deep expertise in India’s DPDPA 2023 / DPDP Rules 2025, IT Act 2000, GDPR, CCPA, and 40+ global data protection regulations. I focus on Privacy Information Management Systems (ISO 27701 / PIMS), grievance handling mechanisms, and board-ready risk and compliance reporting.

Across my leadership roles, I’ve led teams of 30+ across retail, healthcare, financial services, and technology. I embed privacy-by-design across new products, platforms, and client engagements, and I run privacy impact work (PIAs, DPIAs, Transfer Impact Assessments) alongside third-party and vendor risk management.

I’m also hands-on with privacy technology—evaluating and deploying privacy-enhancing technologies (PETs) and implementing tools like OneTrust, Securiti.ai, and Exterro. Certified CIPP/E and an ISO 27701 Lead Implementer, I’m dedicated to turning privacy requirements into operational systems that teams can execute reliably.

Experience

Work history, roles, and key accomplishments

Current

Director – Data Privacy and Governance

Current

Indegene

Jun 2026 - Present (1 month)

Lead enterprise-wide data privacy and governance strategy, policy, and roadmap, serving as the senior escalation point for privacy risk and regulatory decisions. Oversee privacy compliance posture, privacy program/team leadership, and board-level reporting.

Privacy Governance GDPR HIPAA Board Reporting Data Governance Privacy By Design Risk Posture Reporting Incident Trends

Senior Manager – Data Protection/Privacy

Grant Thornton India LLP

Jan 2026 - Jun 2026 (5 months)

Led end-to-end DPDPA 2023 and DPDP Rules 2025 compliance programs, including data mapping, consent notice frameworks, cross-border transfer mechanisms, and grievance redressal. Architected privacy governance frameworks and managed PIMS/ISO 27701 certification, privacy impact assessments, PET evaluations, and regulatory reporting using privacy tools.

IT Act 2000 GDPR CCPA APPI ISO 27701 ISO 27001 Privacy Impact Assessment Data Breach Response Consent Management OneTrust Securiti.AI Exterro Power BI Tableau Privacy Policies

Manager – Data Protection & Privacy

Grant Thornton India LLP

Jan 2021 - Dec 2025 (4 years 11 months)

Managed delivery of privacy program workstreams including data mapping, DSAR, data retention, cookie compliance, and consent management across multiple jurisdictions. Standardized and implemented privacy-by-design approaches, conducted privacy gap assessments/internal audits, and supported third-party compliance and tooling integrations.

Privacy Programs Data Mapping DSAR Data Retention Cookie Compliance Consent Management Privacy By Design Internal Audit Data Processing Agreements OneTrust Securiti.AI Exterro Third Party Compliance

Assistant Manager – Global Data Privacy

Wipro Ltd.

Dec 2019 - Jul 2021 (1 year 7 months)

Designed Wipro’s internal data privacy compliance framework as a data controller, covering GDPR, CCPA, and additional global privacy laws. Conducted large-scale DPIAs, defined DSAR workflows and vendor compliance processes, and supported data processing agreement review and client-facing advisory development.

GDPR CCPA DPIAs Privacy By Design Data Controller Data Processing Agreements Tableau SQL Test Plans UAT Data Migration Business Analyst

Associate Consultant – Data Privacy

Infosys Ltd.

May 2015 - Dec 2019 (4 years 7 months)

Advised global clients on GDPR and CCPA compliance, creating implementation playbooks and knowledge assets for privacy programs. Led data migration engagements, including data classification, test plans/UAT, and operational dashboard development.