Position - Sr. Executive / Assistant Manager – Data Protection & Legal

Department - Legal

Job Location - Andheri, Mumbai

Industry - Pharmaceutical

Educational Qualification - L.L.B.

Additional Qualification- Diploma / Certification in Digital Personal Data Protection Act (DPDPA), 2023 / Data Privacy & Protection

Experience

5–10 years in legal, data privacy, data protection, compliance, or a related role, preferably within the pharmaceutical, healthcare, life sciences, or regulated industry.

Role Summary The Sr. Executive / Assistant Manager – Data Protection will be responsible for supporting and implementing the organization's data protection and privacy framework, ensuring compliance with applicable data protection and privacy laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

The role will also provide legal support on data privacy, contractual matters, regulatory compliance, commercial agreements, and day-to-day legal advisory to various business functions within the pharmaceutical organization.

Key Responsibilities

A. Data Protection & Privacy

1. Assist in designing, implementing, maintaining, and monitoring the organization's data protection and privacy framework in accordance with the DPDP Act, 2023 and applicable rules.
2. Support the development and periodic review of privacy policies, data protection policies, consent notices, privacy notices, SOPs, guidelines, and data processing agreements.
3. Conduct and maintain data mapping and data inventories, identifying personal data collected, processed, stored, shared,



and transferred by various business functions.
4. Maintain appropriate records of personal data processing activities and support periodic reviews of data processing practices.
5. Advise business and functional teams on:

- Consent management
- Personal data collection and processing
- Data retention and deletion
- Data sharing and disclosure
- Data subject/data principal rights
- Vendor and third-party data processing
- Cross-functional data protection requirements

1. Support the organization in establishing and maintaining appropriate data privacy controls, procedures, and governance mechanisms.
2. Assist in addressing data protection grievances, privacy complaints, and data breaches/incidents, including coordination with relevant internal stakeholders.
3. Support the development and implementation of data breach/incident response procedures, including assessment, documentation, escalation, and regulatory compliance requirements.
4. Coordinate data protection compliance audits, assessments, reviews, and remediation activities across relevant functions.
5. Monitor regulatory and legal developments relating to data protection and privacy and advise relevant stakeholders on necessary organizational changes.

What We Offer

- Free Gym Facility for employees
- Subsidized Food Facility
- Supportive and collaborative work environment
- Opportunities for professional growth and learning
- Prospect to work closely with cross-functional business and leadership
- Employee welfare and engagement initiatives

📌 Assistant Manager - Data Protection (Mumbai)
🏢 Ajanta Pharma
📍 Mumbai