Position Summary The Manager Data Protection will act as the technical arm of the Data Protection Office, enabling implementation of privacy-by-design principles across business systems, digital lending platforms, customer onboarding journeys, analytics environments, and third-party integrations. The role bridges legal privacy requirements and technology implementation, ensuring that personal data processing within HDB complies with the Digital Personal Data Protection Act (DPDP Act) and internal privacy governance standards.

Key Responsibilities

- Translate privacy requirements into technical controls across applications and infrastructure.
- Implement Privacy by Design and Default across lending, collections, CRM, analytics, and mobile applications.
- Support deployment of:
- Data minimization controls
- Purpose limitation enforcement
- Consent-based processing logic
- Work with DevOps and product teams to embed privacy controls in SDLC
- Identify data flows across:
- Loan origination systems
- KYC platforms
- Collection systems
- Third-party fintech integrations
- Cloud environments.
- Implement and monitor consent management platforms.
- Ensure systems enforce:
- Purpose-linked consent
- Withdrawal of consent workflows
- Consent audit trails
- Support privacy UX improvements aligned with DPDP requirements.
- Provide technical analysis during:
- Data Protection Impact Assessments (DPIA)
- Vendor privacy assessments
- Current product launches.
- Identify privacy risks in architecture diagrams and system designs.
- Recommend mitigation controls.




- Develop dashboards for privacy compliance monitoring
- Implement automated checks for:
- Unauthorized data access
- Excessive data retention
- Support audit readiness for DPDP, ISO 27701, and RBI inspections
- Review technical architecture of processors and fintech partners.
- Validate data-sharing mechanisms, encryption, and minimization controls.

Qualifications And Skills Education : Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related fields. Certifications such as, CIPT, CDPSE or similar are preferred. Experience : 5-8 years of experience in privacy, data protection, technology, cybersecurity, data engineering, or a related technical role, with a focus on PET implementation. Experience in the NBFC or financial sector is a plus.

Technical expertise : Proficiency in PETs like encryption, anonymization, pseudonymization, and secure computation. Knowledge of data discovery, classification tools, and data masking technologies. Familiarity with privacy frameworks and regulations, including PDP Act and GDPR.

Analytical skills : Ability to assess privacy risks and design effective technological solutions.

Communication skills : Strong communication skills to collaborate with cross-functional teams and explain technical concepts to non-technical stakeholders.

Problem-solving : Demonstrated ability to resolve complex technical privacy challenges.

Collaboration : Experience working with IT, legal, and compliance teams to achieve privacy goals.

📌 Manager (Mumbai)
🏢 HDB FINANCIAL SERVICES
📍 Mumbai