About the role
You will implement a comprehensive privacy governance framework, assess and enhance existing data protection practices, and manage data-related risks across the organization.
Key Responsibilities
- Implement and maintain a privacy
governance framework ensuring compliance with GDPR, DPDP, and other
applicable regulations.
- Evaluate existing data protection
frameworks, identify gaps, and drive corrective actions.
- Develop and manage templates for
data collection, vendor assessments, and data mapping.
- Strengthen the organization’s data
privacy risk management maturity — identify, mitigate, and monitor privacy
risks.
- Maintain records of all data
processing activities.
- Lead data privacy awareness and
training initiatives across business functions.
- Act as the primary point of
contact for data privacy-related queries across the business.
- Review vendor contracts and
consents related to data privacy and project implementation.
- Monitor evolving privacy laws and
make recommendations to the Risk Steering Committee.
- Conduct and coordinate data
privacy audits.
- Maintain a data security incident
management plan to ensure timely remediation of incidents and breaches.
- Ensure IT systems and processes
comply with data privacy and protection laws, including data retention and
destruction policies.
- Collaborate with external privacy law
consultants to advise on jurisdiction-specific legal requirements.
Requirements
- 10+ years of total work experience with 7–8 years in Data
Privacy, Compliance, or Risk Management
- Strong understanding of business
operations and system processes
- Excellent project management,
communication, and influencing skills
- Proven ability to manage
confidential information and work under pressure
- Analytical mindset with the
ability to connect dots and see the big picture
- Proactive and solution-oriented
approach to compliance
- Strong stakeholder management and
collaboration skills across teams, functions, and regions