Responsible for managing and implementing company's data privacy and DPDP compliance program, covering both Data Fiduciary and Data Processor activities.
Key Responsibilities
- Develop and maintain the DPDP Privacy & Compliance Framework, policies and SOPs.
- Maintain Data Inventory, Records of Processing Activities (RoPA) and data-flow documentation.
- Manage privacy notices, consent management and Data Principal rights
- Coordinate privacy assessments / DPIAs for relevant business processes and projects.
- Manage privacy incidents and personal data breach response.
- Drive data retention, deletion and disposal compliance.
- Manage vendor / third-party / subprocessor privacy compliance.
- Coordinate customer DPDP / privacy requirements, assessments and audits.
- Monitor Data Processor compliance for customer/project data.
- Coordinate with HR, GA, IT Security, Legal, Procurement and Business/Project Teams.
- Conduct privacy awareness and training programs.
- Support internal and external privacy audits and track CAPA.
- Maintain key privacy registers, compliance evidence and management reports.
- Monitor regulatory developments relating to DPDP and data privacy.
Candidate Profile
- 510 years of experience in Data Privacy, Data Protection, Compliance, Information Security Governance, Risk or related areas.
- Solid knowledge of India DPDP Act and data privacy principles.
- Experience in IT/ITES or technology environment preferred.
- Experience in privacy governance, audits, risk assessments and compliance management.
- Experience with customer DPAs / privacy requirements and third-party compliance preferred.
- Strong stakeholder management, documentation and communication skills.
Qualification
- Bachelor’s degree in Law / IT / Computer Science / Information Security / Compliance / Business / Risk Management or related discipline.
- Relevant postgraduate qualification preferred.
Certifications – Preferred
- CISA / CISM / ISO 27001 or equivalent certifications