Responsibilities

(List of duties that are marginal or infrequent.)

- Support privacy legal and regulatory research, including review of applicable data protection requirements, regulatory developments and internal compliance obligations; prepare structured summaries and implementation trackers for DPO review.

20%

Maintain regulatory reference materials, obligation registers and supporting records.

- Assist in drafting and periodic review of privacy policies, procedures, consent wording, privacy notices, forms, internal guidance and other privacy-related legal documentation.

20%

Support version control, approvals, publication and evidence maintenance.

- Support review of contracts, data processing clauses, confidentiality terms and third-party privacy requirements in coordination with Legal, Procurement, Information Security and relevant business teams.

15%

Maintain review comments, issue logs and closure evidence.

- Conduct or support Privacy Impact Assessments / DPIAs for recent or changed products, processes, systems and technologies, including identification and documentation of legal and technology-related privacy risks.

15%

Track mitigations, owners, target dates and residual risks for DPO oversight.

- Support data flow mapping, data inventory, records of processing and review of personal data collection, use, storage, sharing, retention and disposal across systems and processes.

15%

Coordinate information collection and maintain supporting documentation.





- Participate in privacy-by-design reviews for technology projects and change initiatives; assess whether privacy requirements are appropriately reflected in system and process design.

10%

Document observations and follow up action items with relevant stakeholders.

- Support privacy incident assessment, data subject request / grievance handling, awareness activities and periodic DPO reporting.

5%

Maintain case files, trackers, dashboards and governance meeting inputs.

Total

100%

- Knowledge Requirements: Working knowledge of data protection and privacy requirements, legal research, contract and policy review, technology systems, data lifecycle concepts, privacy-by-design, DPIA / PIA, data subject rights, grievance handling and basic information security controls.
- Specialist / technical skills: Legal and regulatory research; drafting and document review; contract clause review; data flow mapping; privacy assessment; technology risk understanding; issue tracking; Microsoft Office and structured record management. Familiarity with privacy management or GRC tools is desirable.
- Behavioural / management skills: Analytical thinking, attention to detail, written and verbal communication, documentation discipline, stakeholder coordination, confidentiality, ownership and ability to work under the guidance of the DPO.
- Education & Qualifications: Relevant graduate or post-graduate qualification. A combined legal and technology background is preferred. Relevant privacy, technology or security certification may be desirable.

📌 AVP - Data Protection (Techno-Legal) (India)
🏢 SMBC Group
📍 India