About the Team

Join PayU's Legal and privacy team and work in a dynamic intersection of privacy
and fintech laws. The Legal and Compliance team at PayU plays a strategic role
in enabling business growth while ensuring adherence to regulatory and legal
frameworks.

ABOUT THE ROLE

To support PayU’s growth plans in India for credit, payments and fintech
opportunities, PayU is looking for a privacy legal counsel with solid
background in privacy with exposure to banking, finance, technology and general
corporate (and vendor contracts) related legal work together with a possible
background in payments, credit and/or other financial services.

We are seeking a dynamic Manager - Privacy to lead Digital Personal Data
Protection Act, 2023 (“DPDP Act”) implementation across PayU group of companies.
The role will be to assist in implementation of the privacy program for PayU
group of companies, embed privacy by design across products, platforms and
go-to-market initiatives. Ensure compliance with Indian laws (DPDP Act, IT Act),
sectoral requirements (RBI/NPCI/PCI DSS),



and applicable global standards (e.g.,
GDPR).

RESPONSIBILITIES:

* Operationalize privacy controls across credit journeys: consent capture,
purpose limitation, data minimization, retention/deletion, and grievance
redressal.
* Conduct DPIAs/PIAs for lending use cases (modeling, profiling, alternative
data, bureau/KYC data), and document risk treatments.
* Maintain end‑to‑end data flow diagrams/inventories/RoPA across systems, APIs,
data lakes, and vendors.
* Assist in Data Principal requests/DSARs wherever necessary; implement
ticketing/automation and quality checks.
* Lead vendor privacy due diligence, DPAs, ongoing monitoring.
* Coordinate with InfoSec (where necessary) on incident/breach management and
table‑top exercises; support regulatory engagement and audits.
* Align privacy practices with RBI digital lending guidelines, outsourcing,
KYC/Aadhaar/UIDAI obligations, and credit bureau codes.
* Partner wit

📌 Lead (Gurugram)
🏢 PayU Payments
📍 Gurugram