DPDP Act Implementation & Compliance

- Lead the implementation and ongoing compliance of the Digital Personal Data Protection Act, 2023 across the broking entity and group companies (if applicable).
- Translate DPDP Act requirements into policies, SOPs, controls, and operational workflows.
- Identify applicability as Data Fiduciary / Significant Data Fiduciary (SDF) and support readiness activities accordingly.
- Design and implement Consent Management, Notice Frameworks, and Purpose Limitation mechanisms.
- Ensure lawful handling of personal data, sensitive personal data, and financial data of clients, employees, partners, and vendors.

Data Governance & Privacy Operations

- Establish and maintain Data Governance frameworks including:
- Data classification and labelling
- Records of Processing Activities (ROPA)
- Data retention and deletion schedules

- Implement Privacy by Design & Default principles across applications and digital journeys.
- Oversee Data Principal Rights Management:

- Access, correction, erasure, grievance redressal, and nomination handling

- Coordinate with IT and product teams for privacy requirements in system development and changes.

Regulatory & SEBI Alignment

- Ensure alignment with SEBI circulars, guidelines, and cybersecurity & data protection mandates applicable to broking firms.
- Support regulatory inspections, audits, and compliance submissions related to data protection and privacy.
- Track regulatory updates and assess impact on business processes and technology platforms.

Risk Management & Assessments

- Conduct and manage:
- Data Protection Impact Assessments (DPIA)
- Privacy risk assessments for current products,



vendors, and technologies

- Identify data protection risks and recommend mitigation controls.
- Support incident response related to personal data breaches including assessment, documentation, and regulatory reporting.

Vendor & Third-Party Governance

- Assess DPDP compliance posture of vendors, fintech partners, cloud service providers, and other third parties.
- Review and negotiate data protection clauses, DPAs, and contractual privacy obligations.
- Monitor vendor compliance and periodic reassessments.

Awareness, Training & Governance Reporting

- Drive privacy awareness and training programs for employees and stakeholders.
- Prepare dashboards, KPIs, and governance reports for senior management and Board-level committees.
- Support the Data Protection Officer (DPO) or act as a key contributor to the privacy governance office.

Key Skills & Competencies

Mandatory Skills

- Strong understanding of:
- Digital Personal Data Protection Act, 2023 (India)
- SEBI regulations applicable to broking firms

- Hands-on experience in privacy compliance implementation, not just advisory.
- Experience in data governance, consent management, and privacy operations.
- Ability to work with technology, security, and business teams.
- Excellent documentation, communication, and stakeholder management skills.

Preferred Skills:

- Knowledge of global privacy laws such as GDPR and ability to map them to DPDP requirements.
- Experience with:
- Consent Management Platforms (CMPs)
- GRC tools, data discovery, or privacy automation tools

- Familiarity with ISO/IEC 27701, ISO 27001, or privacy-related frameworks.

📌 Senior Manager - Data Governance Specialist (Pune)
🏢 Bajaj Broking
📍 Pune