Role Purpose The Company Secretarial
- Legal Contract Management & Data Privacy will be responsible for managing the organisation's end-to-end commercial contracting requirements and supporting the development and implementation of its data privacy and protection framework. The role will provide practical legal advice to business teams, negotiate complex commercial arrangements, establish contract governance standards, identify and mitigate contractual and privacy risks, and ensure compliance with applicable data protection requirements. The position requires a commercially oriented legal professional capable of partnering independently with senior business stakeholders while maintaining appropriate legal and regulatory safeguards.

Key Responsibilities
1. Contract Drafting, Review & Negotiation
• Independently draft, review, negotiate and finalize a wide range of commercial agreements, including:
• Master Service Agreements (MSAs)
• Service / Vendor Agreements
• Software and SaaS Agreements
• Technology and IT Agreements
• Software Licensing Agreements
• Professional Services Agreements
• Non-Disclosure Agreements (NDAs)
• Data Processing Agreements (DPAs)
• Consultancy Agreements
• Procurement and Outsourcing Agreements
• Statements of Work (SOWs)
• Business Partnership / Collaboration Agreements
• Amendments and termination arrangements.
• Lead negotiations on key contractual provisions relating to:
• Limitation of liability
• Indemnities
• Intellectual property rights
• Confidentiality
• Data protection and information security
• Representations and warranties
• Service levels
• Insurance
• Audit rights
• Business continuity
• Termination and exit management
• Dispute resolution.
• Identify legal and commercial risks and recommend practical risk-mitigation measures to business stakeholders.
• Develop appropriate negotiating positions and escalation thresholds for high-risk contractual provisions. 2. Contract Lifecycle Management & Governance
• Manage and strengthen the organisation's Contract Lifecycle Management (CLM) framework from contract initiation through execution, renewal and termination.
• Establish and periodically update:
• Standard contract templates
• Clause libraries
• Contracting playbooks
• Deviation matrices
• Approval matrices
• Delegation of authority requirements
• Standard negotiation positions.
• Implement mechanisms for tracking contractual obligations, renewals, expiries, notice periods and key deliverables.
• Maintain effective contract repositories and ensure appropriate documentation and audit trails.
• Drive improvements in contract turnaround times and contracting efficiency without compromising legal safeguards.
• Support implementation and optimisation of contract management technology and workflow automation. 3. Data Privacy & Data Protection
• Support and/or lead implementation of the organisation's privacy compliance framework,



including compliance with applicable Indian data protection requirements and, where relevant to the organisation's operations, international privacy requirements.
• Advise business, technology, procurement, HR, marketing and other functions on privacy implications associated with:
• Collection and processing of personal data
• Employee data
• Customer and vendor information
• Data sharing
• Cross-border data arrangements
• Technology platforms
• New products and business initiatives.
• Draft, review and periodically update:
• Privacy policies and notices
• Consent language
• Data Processing Agreements
• Data-sharing arrangements
• Vendor privacy clauses
• Employee privacy documentation
• Internal privacy procedures and standards.
• Facilitate Privacy Impact Assessments / Data Protection Impact Assessments for current initiatives, products, systems and processing activities, as applicable.
• Partner with Information Security and Technology teams to ensure alignment between contractual privacy obligations and technical/security controls. 4. Privacy Governance & Compliance
• Support maintenance of inventories or records relating to personal-data processing activities.
• Coordinate with relevant internal functions for handling data principal/data subject requests in accordance with applicable requirements.
• Establish and monitor privacy compliance processes relating to data retention, deletion, access, sharing and third-party processing.
• Conduct periodic privacy compliance reviews and identify remediation requirements.
• Monitor regulatory developments relating to privacy, technology, digital regulation and data protection and assess their potential impact on the organisation.
• Develop and deliver privacy and contracting awareness/training programmes for relevant employees. 5. Third-Party & Vendor Risk Management
• Conduct legal and privacy reviews of vendors, service providers and other third parties handling organisational or personal data.
• Review vendor privacy, cybersecurity and data-processing commitments in collaboration with Information Security, Procurement, IT Risk and business teams.
• Ensure appropriate contractual safeguards are incorporated based on the nature and risk of the engagement.
• Assist in establishing risk-based vendor contracting and privacy due-diligence standards. 6. Data Breach & Incident Management
• Provide legal and privacy support in relation to potential or actual data-security incidents.
• Coordinate with Information Security, IT,



Compliance and senior management in assessing legal and contractual implications arising from incidents.
• Review contractual breach-notification obligations and support regulatory/customer notification assessments where applicable.
• Assist with post-incident remediation and strengthening of contractual and privacy controls. 7. Business & Stakeholder Advisory
• Act as a trusted legal partner to business teams on commercial contracting and data privacy matters.
• Provide clear, commercially practical advice rather than purely theoretical legal opinions.
• Engage with senior stakeholders to resolve complex contractual negotiations and risk issues.
• Collaborate closely with:
• Procurement
• Information Technology
• Information Security
• Compliance
• Risk
• Finance
• Human Resources
• Sales / Business teams.
• Manage external counsel, where required, including matter allocation, quality of advice and legal spend. Key Skills & Competencies The ideal candidate should demonstrate:
• Strong commercial contract drafting and negotiation skills.
• Thorough understanding of contract law and commercial transactions.
• Working knowledge of data privacy and protection frameworks.
• Ability to interpret privacy requirements in the context of practical business processes.
• Strong understanding of technology/SaaS/vendor contracts.
• Good appreciation of cybersecurity and information-security issues from a legal and contractual perspective.
• Strong legal risk-identification and mitigation capabilities.
• Ability to independently negotiate with sophisticated counterparties.
• Excellent stakeholder-management and influencing skills.
• Strong written and verbal communication skills.
• Sound commercial judgement and solution-oriented approach.
• Ability to manage multiple transactions and competing priorities.
• Strong attention to detail while maintaining a broader business perspective. Specifications
• Bachelor's degree in Law (LL.
B.) from a recognized institution.
• Approximately 10–15 years of post-qualification experience in a corporate legal department of an insurance company and/or reputed law firm.
• Significant hands-on experience in commercial contract drafting and negotiation.
• Experience handling technology, vendor, outsourcing and/or service-related agreements.
• Demonstrable exposure to privacy and data-protection matters.
• Experience working directly with senior business stakeholders. Preferred
• LL.
M. or specialization in Technology Law / Data Privacy.
• Professional certification in data privacy or protection.
• Experience implementing or managing a Contract Lifecycle Management platform.
• Prior experience working in regulated sectors, technology-intensive businesses, financial services, manufacturing or large multinational/corporate environments.
• Exposure to cross-border commercial contracts and international privacy requirements.

📌 Company Secretarial (Mumbai)
🏢 Universal Sompo General Insurance Co.
📍 Mumbai