Cyber Security Engineer

We are hiring!!!

Position: Senior Data privacy (Cybersecurity Engineer)

• This position will lead privacy initiatives and ensure organizational compliance with data protection regulations. He/she should have a deep understanding of privacy concepts, laws and a proven track record in managing privacy programs within complex environments.
• The incumbent will be responsible for-Lead the development and execution of comprehensive privacy programs, including policies, procedures, templates and Identify gaps in privacy processes.
• Work with business teams to understand the business's current use of Personally Identifiable Information (PII). Work with Privacy partner to identify gaps and work towards the remedial options suggested. Manage privacy incidents, including breach investigations and reporting.
• Develop and enhance consent management framework. Oversee vendor and third-party data privacy compliance, including contract negotiations and audits.

Ensure overall compliance from Data Privacy perspective-

• Build good connections with peers in BUs and their IT SPOCS. Identify gaps as per applicable privacy law. Improve by implementing appropriate technologies & processes. Serve as the primary point of contact for privacy-related matters for internal stakeholders, data subjects and for regulatory authorities.
• Monitor and respond to changes in privacy legislation, ensuring the organization adapts to remain compliant. Conduct advanced Data Protection Impact Assessments (DPIAs), and risk assessments to identify and mitigate privacy risks. Prepare and update Records of Processing Activities (RoPAs) mapping the lifecycle of personal data across business processes. Track compliance KPIs and present insights to senior leadership.

Technical Skills required:

• Technical Skills In-depth knowledge of global privacy laws and frameworks, including GDPR, DPDPA, HIPAA, and others. Good understanding of data protection technologies such as DLP, Data classification, CASB, Access control etc.
• Good understanding of Privacy platforms / technologies to meet DPDP Act or other privacy act requirements. Experience in managing privacy programs, incidents and compliance audits.
• Experience in defining KPIs for the Privacy program.
• Professional certifications such as ISO 27001:2022 / CISA / CISM / DCPP / DCPLA / CIPP/E, CIPM, CIPT, or equivalent is desirable but not mandatory.
• Overall, 08 -10yrs in Cybersecurity domains and relevant 3-5 years of experience in privacy compliance and data protection.

If interested kindly share resume on bhavana@akshay.com