Evidence over assertion
We do not tell a client they are compliant because a policy exists. We test it, and we report what the test found — including when the answer is inconvenient for us.
Loading page content
Not aspirations. Each of these constrains a decision we make regularly — which is the only test of whether a stated value is real.
We do not tell a client they are compliant because a policy exists. We test it, and we report what the test found — including when the answer is inconvenient for us.
We say no to work outside our competence. Every consultant here has genuine depth in something, and knows where their expertise ends.
Advice that is not written down did not happen. Our writing standard is high because decisions get made on the strength of it.
We hold no reseller agreements, referral fees or vendor commissions. It costs us revenue and it is the reason clients trust our recommendations.
Every engagement pairs a senior with someone earlier in their career. Reviews are substantive, and nothing goes to a client without one.
Every role is a real vacancy with a named hiring manager and a start date we are working toward. We do not post speculative listings.
Build and lead our AI governance practice — ISO 42001 implementations, EU AI Act readiness, model evaluation and red teaming for clients deploying AI in consequential decisions.
Six stages, about three weeks end to end. No whiteboard algorithms, no unpaid take-homes, no surprise extra rounds.
A human reads every application. You will hear back within five working days, whichever way the decision goes.
Forty-five minutes with the practice lead — your background, what you want next, and honest answers about the role.
Certification is funded because clients pay for expertise, not for a certificate on a wall. Research time exists because it produces our methodology. Leave is protected because burnout is the industry's default failure mode.
Exam fees, training, study leave and renewal costs for CIPP, CIPM, CISSP, CISA, ISO lead implementer and auditor tracks.
Hybrid by default, remote where the role allows, and hours that accommodate the fact that people have lives.
Comprehensive medical insurance covering you, your partner, children and parents, plus mental health support.
Half a day a week for research, tooling, writing or study. It produces our Knowledge Hub and most of our methodology.
Funded attendance at c0c0n, Nullcon, IAPP events and equivalents, with speaking and paper support if you want it.
Consulting has a burnout problem. We staff engagements realistically, we protect leave, and we treat a pattern of weekend work as a planning failure.
Deliver ISO 27001, ISO 27701 and SOC 2 programmes for clients ranging from high-growth SaaS to established enterprises, with real ownership from your first engagement.
Harden client cloud estates for real — landing zones, IAM remediation, policy-as-code and Kubernetes security. This is a building role, not a reviewing one.
Operate live client compliance programmes — evidence collection, control testing, questionnaire response — and learn the craft properly from people who do it well.
Nothing quite right?
We hire ahead of demand when someone genuinely strong appears. Write to careers@datatrustindia.com with what you do well and what you want next.
A working session on a realistic problem from our actual engagements. No whiteboard algorithms, no trick questions.
A short, paid exercise reflecting real work — a client memo, an assessment finding or a control design. Under three hours.
Meet two people you would work with daily, plus a founder. As much for you to assess us as the other way round.
A decision within three working days of the final conversation, with the compensation band explained rather than negotiated from a hidden anchor.
Published levels with explicit criteria, reviewed twice a year. No mystery about what the next step requires.