Job Summary

Role mission The Data Risk and Privacy Lead is responsible for implementing data privacy compliance across their assigned scope and ensuring data security and regulatory compliance by leading risk mitigation strategies, managing incidents, and implementing data risk frameworks across the data lifecycle.

Responsibilities

- Compliance Regulatory Oversight - Guide and monitor operational compliance with data protection laws and internal privacy policies.

- Support execution of the Data Risk Assurance Framework using approved tools and templates.

- Conduct periodic compliance reviews.

- Maintain an up-to-date processing register using central tools and processes.

- Strategy, Governance Reporting - Contextualize and operationalize the SE Data Risk strategy.

- Govern the Data Risk framework across the data lifecycle.

- Design and implement data risk policies and mitigation frameworks.

- Establish and maintain local privacy governance (steerco, action plans, risk reporting).

- Align with the Group Data Protection Office and local and regional regulatory requirements.

- Track and report privacy performance using KPIs and maturity assessments.

- Risk Management Compliance - Anticipate, identify, prioritize, and mitigate data risks.

- Ensure compliance with data controls and regulatory requirements.

- Liaise with the Data Risk Security team on assurance and risk management.

- Data Risk and Privacy Lead Internal Support - Incident Management - Report and document privacy incidents, lead privacy-related aspects of investigations, and lead data incident analysis and mitigation.

- Ensure all incidents follow the Cyber Incident process.

- Promote awareness of breach-handling requirements.

- Maintain a local register of data breaches.

- Program Process Oversight - Develop and deliver a local data risk assurance plan.

- Maintain the processing register using centrally provided tools.

- Support digital asset certification.





- Ensure DPIAs are initiated and reviewed where necessary.

- Ensure vendors complete privacy due diligence and have a signed Data Protection Addendum.

- Monitor overall progress of data risk initiatives.

- Execute manage risk mitigation and control implementation within the Data Office.

- Queries Claims - Act as the contact point for data subjects and manage queries and claims in line with company policy.

- Training Awareness - Promote a strong privacy culture through training and awareness activities.

- Provide guidance to employees on privacy responsibilities and best practices.

Requirements

- Bachelor's degree in information systems, business, data management, cybersecurity, law, compliance, or a related discipline-or equivalent practical experience.

- 9-14 years of relevant experience in data governance, privacy, risk management, compliance, audit, or information security. Internships, academic projects, and rotational assignments may qualify.

- Experience supporting documentation, reporting, action tracking, or cross-functional projects.

- Basic understanding of data privacy, data protection, and information security principles.

- Awareness of privacy regulations relevant to the assigned scope and willingness to learn company policies and regional requirements.

- Foundational understanding of the data lifecycle, including collection, use, sharing, retention, and disposal.

- Ability to support data risk assessments, document controls, maintain risk and processing registers, and track mitigation actions using approved tools and templates.





- Basic awareness of privacy impact assessments, vendor privacy reviews, data subject requests, and incident escalation procedures.

- Proficiency in spreadsheets, presentations, and collaboration tools; ability to prepare clear status reports and basic performance metrics.

- Willingness to learn about the company's privacy and governance platforms. Prior experience with a specific platform should be preferred, not mandatory.

- Solid organization, attention to detail, and follow-through.

- Analytical thinking and the ability to recognize issues, ask questions, and escalate concerns appropriately.

- Clear written and verbal communication, including professional working proficiency in English.

- Ability to collaborate with Data Office, Legal, Privacy, Cybersecurity, IT, and business teams across regions and time zones.

- Sound judgement, discretion, and responsible handling of confidential information.

- Initiative, adaptability, and commitment to continuous learning.

Skills

- data privacy
- data protection
- information security
- privacy impact assessments
- vendor privacy reviews
- data subject requests
- data governance
- risk management
- incident management

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

Role: System Analyst,

Industry Type: Electrical Equipment,

Department: IT & Information Security,

Employment Type: Full Time, Permanent

Role Category: IT Infrastructure Services

Education

UG: Any Graduate

PG: Any Postgraduate read more

Key Skills automationcollaboration toolscompliancecybercybersecuritydata governancedata managementdata privacydata protectiondata securitydue diligenceincident analysisincident managementinformation securitylegal

📌 Sr. Specialist, Data Privacy and Protection (Bengaluru)
🏢 Schneider Electric
📍 Bengaluru