Role Summary: Responsible for ensuring organizational compliance with data privacy regulations by assessing risks, advising stakeholders, and strengthening privacy controls across business processes.

We are seeking a resource with strong expertise in contracting and agreement assessments / DPA review, managing customer due diligence and the ability to independently manage the end-to-end third-party due diligence program. The role requires hands on ownership of contract risk assessment, vendor privacy due diligence, and coordination with business, legal, and procurement teams

Key Responsibilities

Strategic Leadership: Develop and execute a global privacy roadmap that aligns with organizational growth and expansion into new markets.

- Monitor and interpret global privacy laws; ensure compliance alignment
- Collaborate with business, risk, compliance, and technology stakeholders
- Conduct impact assessments across business and technology processes
- Perform gap analysis between Local Addendums and Industry Standards
- Prepare stakeholder updates, documentation, and implementation reports

Regulatory Guardrail: Act as the subject matter expert on global privacy laws including GDPR, DPDPA, as well as emerging regulatory guidelines.
- Analyse local laws/regulations that have been recently rolled out
- Perform privacy audits, compliance testing, and gap analysis
- Design and execute implementation approaches for identified remediation activities
- Drive process improvements and implementation tracking

Commercial Support & Negotiations: Partner with Sales and Legal to negotiate complex. Data Processing Addendums (DPAs) and BharatPe privacy program during high-stakes client audits and RFPs.
- Review Data Processing Agreements and assess privacy risks
- Conduct vendor due diligence and third-party risk assessments

Privacy by Design: Embed privacy requirements into the lifecycle of new product
- development and client onboarding processes.




- Conduct Data Privacy Impact Assessments (DPIAs) and privacy risk assessments
- Advise teams on privacy requirements for new projects, systems, and process changes

Incident Management: Lead the Privacy Incident Response Team, ensuring swift,
- compliant, and transparent handling of any potential data breaches.

Audit & Compliance: Oversee Data Protection Impact Assessments (DPIAs) and manage third-party privacy audits (e.g., SOC2, ISO 27001, ISO 27701) in collaboration with various functions
- Support governance, control enhancement, and regulatory compliance initiatives

Advocacy & Training: Foster a culture of privacy awareness across our global frontline, ensuring our "People-First" mission extends to how we protect individual data rights. People Leadership & Development: Work with a multidisciplinary team to drive privacy agenda across the organization.

Qualifications

- Experience: 10+ years of experience in data privacy, legal, or compliance, with at least 5 years in a global leadership role-ideally within the BFSI, Fintech, SaaS, or Tech sectors - directly managing and developing diverse teams of privacy professionals across multiple jurisdictions.
- Education: JD or equivalent advanced degree preferred; Bachelor's degree in Law, IT, or Business required.

Business Skills
- Robust experience in gap analysis, impact assessments, and implementation delivery
- Ability to interpret and operationalise regulatory and policy standards
- Strong stakeholder management and consulting skills

Certifications: CIPP/E, CIPP/US, and CIPM (IAPP) certifications are highly preferred.

Technical Fluency

- Deep understanding of how data flows in applications, infrastructure and AI/ML pipelines.
- Data Privacy domain expertise
- Experience working on regulatory transformation initiatives
- Exposure to governance and controls frameworks
- Experience with privacy compliance tools, frameworks, or GRC platforms
- Excellent analytical, communication, and documentation skills

📌 Senior Manager - Data Privacy (Gurugram)
🏢 BharatPe
📍 Gurugram