Data Privacy

About The Job:

• Responsible for managing and driving the organization's Data Privacy and DPDP compliance program, including privacy assessments, data discovery, data mapping, ROPA, Data Flow Diagrams, third-party privacy assessments, cookie and consent management, privacy awareness and implementation of privacy technology solutions.

Essential Job Functions:

• Lead the organization's Data Privacy Program and drive implementation of applicable DPDP Act/Rules and other data privacy requirements.
• Manage and coordinate the Privacy Knowledge Partner for gap assessment, roadmap, compliance framework, policies and implementation support.
• Drive DPDP gap assessment, remediation tracking and compliance roadmap across business and technology functions.
• Lead creation and maintenance of Records of Processing Activities (ROPA) and Data Flow Diagrams (DFD) for critical processes and applications.
• Conduct/coordinate Third-Party/Vendor Privacy Assessments and ensure appropriate privacy controls and contractual requirements are addressed.
• Coordinate with Business, HR, IT, Legal, Procurement, Information Security and other departments for privacy compliance and awareness.
• Lead implementation and operations of Data Discovery and Data Classification tools, including application/system integration.
• Drive data discovery, sensitive/personal data identification, classification, ownership and remediation activities.
• Manage implementation of Cookie and Consent Management solutions and ensure appropriate application/web integration.
• Define and monitor privacy requirements for applications, APIs, cloud platforms and technology initiatives.
• Support Privacy Impact Assessments (PIA/DPIA) for new products, applications, processes and use cases involving personal data.
• Develop and maintain privacy policies, standards, procedures, SOPs and guidelines.
• Drive organization-wide privacy awareness and training programs.
• Monitor privacy risks, compliance gaps and remediation status and provide periodic reporting to senior management/DPO/privacy governance forums.
• Coordinate internal/external audits, regulatory assessments and privacy compliance reviews and drive closure of observations.
• Establish privacy KPIs, dashboards and governance mechanisms to measure the maturity and effectiveness of the Data Privacy Program.

Key Performance Indicators

• DPDP gap assessment and remediation roadmap completion.
• % completion and accuracy of ROPA and DFD for identified processes/applications.
• Third-party/vendor privacy assessment coverage and remediation.
• Data discovery and personal/sensitive data identification coverage.
• Successful implementation and integration of Data Discovery, Cookie and Consent Management tools.
• Application/system integration coverage of privacy technology solutions.
• Timely closure of identified privacy compliance gaps and risks.
• Completion of privacy awareness and training across relevant departments.
• Timely closure of audit/regulatory observations.
• Improvement in overall Data Privacy and DPDP compliance maturity.

Qualifications:
Skills & Competencies:

• Strong experience in Data Privacy, Privacy Governance and DPDP compliance.
• Good understanding of DPDP Act/Rules, privacy principles and data protection lifecycle.
• Experience in ROPA, DFD, Data Mapping, Data Discovery and Data Classification.
• Experience managing privacy gap assessments and knowledge/consulting partners.
• Strong knowledge of Third-Party/Vendor Privacy Assessment and privacy contractual requirements.
• Experience with Cookie & Consent Management and privacy technology implementation/integration.
• Understanding of PIA/DPIA, Privacy by Design and data lifecycle management.
• Strong stakeholder-management skills with ability to coordinate across Business, IT, Legal, HR, Procurement and Information Security.
• Experience in developing privacy policies, SOPs, frameworks and awareness programs.
• Strong audit, compliance and regulatory-management capability.
• Ability to translate privacy requirements into practical business and technology controls.
• Strong communication, project-management and leadership skills.

Qualification Requirement

• Bachelor’s/Mastrer’s degree in IT, Computer Science, Cybersecurity, Law, Risk or related field, with 10+ years of experience, including relevant experience in Data Privacy/DPDP, GRC or Information Security.
• Certifications such as CIPP, CIPM, ISO 27701 or CDPO/DPO will be an added advantage, with BFSI/Insurance experience preferred.

Relevant Work-experience

• 6–8+ years of experience in Data Privacy, Information Security/GRC, Compliance, Risk or related areas, with significant hands-on experience in privacy program implementation.

Language Proficiency

• English & Hindi