The Data Privacy Steward's primary responsibility is to support the data privacy program activities established by the GDPO and communicated through the Global Data Privacy Operations (GDPOps) team. The person will be responsible for spearheading the core activities within their designated scope and reporting out on key metrics to track program status and progress. The position requires coordination across all assigned levels of business including (but not limited to) Client Services, Practice, Product, Internal Operations, and Finance teams, as well as externally to third parties. The Data Privacy Steward works in close coordination with the GDPOps team and reports to the Data Privacy Program Lead.

KEY RESPONSIBILITIES

Data Privacy Steward oversees the following workstreams within their designated scope:

Program Support

- Ensure appointment as a Data Privacy Steward has been announced broadly (via official email)
- Act as the single point of contact for all privacy-related matters
- Assist in the Data Subject Access Request (DSAR) process, ensuring that all departments receive the request, perform the search, and report back on their findings. Where applicable, ensure that the data subject's request is fulfilled (data deletion, rectification, etc.)
- Attend all Data Privacy Steward meetings as scheduled by GDPOps and participate in discussions
- Assist with coordinating local training alongside GDPO and GDPOps

Client/Business Support

- Support client-facing teams to ensure questions related to data privacy are answered in a timely manner following the official Engagement Workflow




- Coordinate the resolution of client concerns (questionnaires, assessments, audits, and informal questions) with Global Data Privacy Operations (GDPOps), Global Data Privacy Office (GDPO), Global Security Office (GSO and business personnel)
- Act as a voice for any support needed to service clients effectively and efficiently

Data Inventory

- Work with internal stakeholders and taskforce members to complete the roster of clients and the services using the provided template, keeping it up to date as new clients are onboarded and others are transitioned out
- With the support of GDPOps, train inventory respondents to prepare them for the Data Inventory
- Serve as the primary point of contact for respondents questions, addressing inquiries directly and escalating to GDPOps as needed.
- Track completion of Data Inventory and escalate to appropriate leadership if completion is not attained

Proprietary Product Due Diligence

- Maintain a roster of proprietary products developed and product owners
- Ensure all proprietary products have been assessed for data privacy program compliance
- Assist GDPO when needed in completing the Data Protection Impact Assessment (DPIA)




- Support GDPOps and product owners in implementing recommendations from the DPIA
- Actively promote integration of data privacy into product & solution development and records retention practices (Privacy-by-Design)

Vendor Due Diligence

- Maintain a list of all vendors that process personal data and require the Vendor Due Diligence assessment
- Obtain contact information for vendors used
- Support escalation efforts as needed
- For in-scope vendors, coordinate with GSO to ensure security reviews have been completed

Skills/Characteristics:

- Build relationships among stakeholders to help promote and empower the organizations commitment to data privacy
- Demonstrate a solid understanding of basic data privacy concepts and familiarity with applicable legislation
- Solid organizational and program management skills, especially the ability to meet project deadlines with a focus on details
- Solid interpersonal, analytical, and problem-solving skills with high attention to detail, must possess the ability to leverage their influence to propel projects toward successful completion
- Agency expertise to navigate the departments within the agency and identify the correct contacts to obtain required information
- Industry expertise to quality assure deliverables, must have a detailed understanding of the services provided by the agency and any tools/software/proprietary products that are utilized
- OneTrust experience
- Demonstrated aptitude to quickly and effectively adapt to technologies outside of current experience

📌 Director - Data Privacy Operations (Mumbai)
🏢 Publicis Groupe India
📍 Mumbai