Summary:

Part of the Legal / Compliance function, responsible for driving global data privacy programs, ensuring regulatory compliance, and embedding privacy-by-design principles across business operations. Plays a critical role in safeguarding personal data, mitigating privacy risks, and aligning legal, technical, and operational requirements.

Key Responsibilities:

Contractual Review & Negotiation

- Review, draft, and negotiate Data Processing Agreements (DPAs), EU SCCs, and UK SCCs in line with regulatory and organizational requirements.
- Advise stakeholders on contractual privacy risks and propose mitigation strategies.
- Support cross-border data transfer assessments and related documentation.

Privacy Regulation Implementation

- Lead/support implementation of GDPR-compliant frameworks across business processes.
- Conduct gap assessments against GDPR, DPDPA, CCPA, ISO 27701, and other applicable laws.
- Recommend remediation actions and ensure closure of compliance gaps.

Legal & Regulatory Advisory

- Provide expert guidance on privacy laws, including international data transfers.
- Monitor global privacy regulations and assess business impact.
- Translate regulatory requirements into actionable internal policies and controls.

Technical & Security Controls

- Collaborate with IT and Information Security teams to ensure appropriate technical and organizational measures (TOMs).
- Review privacy-enhancing technologies and secure data practices.
- Align legal requirements with operational security measures.

Privacy Impact Assessments (PIA/DPIA)

- Conduct DPIAs for new systems, processes, and business initiatives.
- Identify, assess,



and mitigate risks related to personal data processing.

Training & Awareness

- Deliver privacy training and awareness sessions across functions.
- Promote a strong privacy-first culture within the organization.

Preferred Skills:

- Robust analytical and problem-solving mindset.
- Ability to manage multiple projects simultaneously.
- Collaboration across legal, IT, security, and business teams.
- Excellent communication and stakeholder management skills.
- Experience with privacy tools (OneTrust, TrustArc, etc.).

Technical & Functional Expertise:

- Strong knowledge of GDPR, EU SCCs, UK SCCs, and global privacy laws.
- Experience with DPAs, DPIAs, data mapping, and compliance frameworks.
- Understanding of technical security controls and risk management principles.
- Familiarity with ISO 27701, DPDPA, CCPA, and other global regulations.

Certifications (Mandatory):

- CIPP/E
- CIPM
- CIPT

Qualifications and Education:

- LLB (Bachelors degree in Law)

Experience Requirements:

- 10–12 years of experience in data privacy, data protection, or regulatory compliance roles.
- Demonstrated experience balancing legal, technical, and operational privacy requirements.

Preferred Experience:

- Experience working in multinational or regulated environments.
- Familiarity with global privacy regimes (e.g., PDPA, PIPL).

Behavioral Competencies:

- Strong problem-solving and analytical skills
- Attention to detail and accuracy
- Proactive and solution-oriented approach
- Ability to work under pressure and manage multiple priorities
- Adaptability and continuous learning mindset

📌 Senior Manager- Data Privacy (Gurugram)
🏢 INDIGO
📍 Gurugram