About the role
Responsibilities:
- Develop, implement, and maintain enterprise-wide privacy and data protection policies, standards, and procedures.
- Ensure compliance with the DPDP Act, GDPR, and other applicable privacy regulations.
- Conduct and oversee Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
- Establish privacy-by-design principles across products, applications, and business processes.
- Manage data subject rights requests, consent management, and privacy governance activities.
- Oversee third-party privacy risk assessments and data processing agreements.
- Lead privacy incident response activities and coordinate regulatory reporting where required.
- Maintain records of processing activities and data inventories.
- Deliver privacy awareness and training programs across the organisation.
- Act as the primary point of contact for privacy-related audits, assessments, and regulatory inquiries.
Requirements:
- Master's degree in Information Security, Computer Science, Information Systems, Law, Risk Management, or a related field.
- Minimum 10 years of experience in Data Privacy, Information Security, Risk Management, Compliance, or Governance.
- Minimum 5 years of experience managing enterprise privacy and data protection programs.
- Strong understanding of the DPDP Act, 2023 GDPR, CCPA/CPRA, ISO 27701 ISO 27001 Privacy Risk Management and Data Governance frameworks.