Job Description:
Own the end-to-end execution and maintenance of the enterprise data privacy compliance
program across the group and individual business verticals (retail, healthcare, education, etc.),
ensuring all processing activities meet regulatory obligations and internal policy standards.
Lead DPDPA compliance operationalization across all businesses - including data inventory
and records of processing activities (RoPA), lawful basis documentation, consent mechanism
implementation, and cross-border data transfer compliance under applicable adequacy and
contractual frameworks.
Drive the attainment and sustained compliance of Privacy Information Management System
(PIMS) / ISO 27701 certification across business units, while maintaining alignment with the
ISO 27001 information security management system.
Act as a primary compliance interface for internal business teams, auditors, and regulatory
authorities on data privacy matters.
Maintain a agile regulatory compliance register mapping applicable obligations under the IT
Act 2000, DPDP Act 2023, DPDP Rules 2025, GDPR, and other relevant global privacy
statutes to organizational processes, controls, and accountable owners.
Conduct periodic compliance assessments across business units to identify gaps, partial




compliance, or emerging obligations, and drive structured remediation plans through to verified closure.
Oversee the execution of Privacy Impact Assessments (PIAs) and Data Protection Impact
Assessments (DPIAs) for recent products, services, technology deployments, and data
processing changes from compliance perspective.
Lead the compliance dimension of data breach response - including regulatory notification
obligations, Data Protection Board filings, record-keeping requirements, and post-breach
compliance remediation - in coordination with IT, Cyber Security, Legal, and business teams.
Draft, review, and maintain the repository of data protection policies, standard operating
procedures, consent templates, privacy notices, and data processing agreements, ensuring
they remain current with evolving regulatory requirements.
Oversee third-party and vendor privacy compliance through an ongoing compliance monitoring
program for external data processors and sub-processors.
Support with preparation of compliance dashboards, audit findings, and regulatory readiness
reports to senior management and governance committees, as needed.

📌 Data Privacy Panvel
🏢 Acme Services Private
📍 Panvel