Cyber - Digital Trust And Online Protection - Product Compliance - L35

Data Protection - Product Compliance - Consultant

Deloittes Regulatory, Risk & Forensic practice helps clients turn evolving regulatory and risk requirements into practical action. Our Product Compliance practice supports technology, media, and telecommunications organizations in embedding compliance across the product lifecycle, from strategy and design through launch, monitoring, and incident response, including for artificial intelligence (AI)-enabled and agentic products. Join a team that combines data, AI, emerging technology, and industry insight to help clients navigate complexity and create value.

Work youll do

As a Security Engineer II on the Data and Digital Trust team, you will be responsible for:

• Support product compliance program design and transformation, including operating models, product lifecycle processes, governance, compliance-by-design, automation, testing, and issue remediation.
• Translate regulatory developments affecting software, digital platforms, and AI-enabled products into product requirements, risk taxonomies, control architectures, and policies.
• Assess product processes, data flows, and controls, including identity, access, data use, and third-party dependencies, to support risk assessments and compliance-by-design practices.
• Execute control testing, launch-readiness reviews, red-teaming, release regression testing, key risk and control indicator monitoring, incident exercises, and evidence management for requests for information (RFIs) and audits.
• Support AI and agentic product compliance, data, identity, and access governance, age assurance, youth-by-design, and third-party risk; manage workstreams and contribute to client deliverables, proposals, and thought leadership.

The team

Deloittes Data and Digital Trust practice helps clients use data responsibly while safeguarding privacy, security, and digital trust. We advise, implement, and operate solutions across privacy governance and compliance, data protection and compliance, digital trust and online protection, risk and controls enablement, and technology implementation. Our teams help organizations respond to changing regulations, consumer expectations, and technology developments while advancing sustainable digital transformation.

Location: Hyderabad, Bengaluru, Chennai, Pune

Qualifications

Required:

• Bachelor’s degree in Information Systems, Computer Science, Law, Business Management, or Public Policy
• 3+ years of experience in technology, media, and telecommunications or consulting in product compliance program design, product risk assessments, compliance-by-design, trust and safety, regulatory implementation, product compliance testing and validation, compliance automation, regulatory readiness, or data analysis.
• Experience supporting client engagements or project workstreams in a consulting, advisory, or professional services environment.

Preferred:

• Experience with product regulations and frameworks, including the Digital Markets Act, Digital Services Act, Cyber Resilience Act, European Union Data Act, European Union Artificial Intelligence Act, United Kingdom Online Safety Act, General Data Protection Regulation (GDPR), Childrens Online Privacy Protection Act (COPPA), age-appropriate design and youth online safety laws, National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework, or International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 42001.
• Experience with regulatory requirements analysis, product applicability mapping, and regulatory controls testing.
• Experience with governance, risk, and compliance (GRC) and compliance automation tools, including ServiceNow Integrated Risk Management (IRM), Archer, or policy-as-code integrations in continuous integration/continuous delivery (CI/CD) workflows.
• Experience supporting product compliance, trust and safety, or regulatory risk functions in a technology, media, and telecommunications company or other regulated industry, including risk assessments, reporting, controls, testing, or data analytics.
• Experience with artificial intelligence (AI) governance, age assurance and youth safety, or product data, identity, and access governance for digital products.
• Experience partnering with product, engineering, legal, and policy teams to embed compliance requirements in product design, user stories, and release processes; supporting proposal development, client presentations, or business development activities; or holding a Master of Business Administration, Certified Regulatory Compliance Manager, Certified Information Privacy Professional, AI Governance Professional, Certified Information Systems Auditor, Project Management Professional, or Certified in Risk and Information Systems Control designation.