Job
Description
We are Hiring a Data Privacy Manager for a leading Conglomerate based in Mumbai Education: Bachelor/Masters Degree in Computer Science/ IT /Privacy or any field In-depth knowledge of global privacy laws and frameworks, including GDPR, DPDPA, HIPAA, and others. Professional certifications such as ISO 27001:2022 / CISA / CISM / DCPP / DCPLA / CIPP/E, CIPM, CIPT, or equivalent is desirable but not mandatory. This position will lead privacy initiatives and ensure organizational compliance with data protection regulations. He/she should have a deep understanding of privacy concepts, laws and a proven track record in managing privacy programs within complex environments. Lead the development and execution of comprehensive privacy programs, including policies, procedures, templates and Identify gaps in privacy processes- Work with business teams to understand the business's current use of Personally Identifiable Information (PII). Work with Privacy partner to identify gaps and work towards the remedial options suggested. Manage privacy incidents, including breach investigations and reporting. Develop and enhance consent management framework. Oversee vendor and third-party data privacy compliance, including contract negotiations and audits. Improve overall compliance from Data Privacy perspective- Build good connections with peers in BUs and their IT SPOCS. Identify gaps as per applicable privacy law. Improve by implementing appropriate technologies & processes. Serve as the primary point of contact for privacy-related matters for internal stakeholders, data subjects and for regulatory authorities. Monitor and respond to changes in privacy legislation, ensuring the organization adapts to remain compliant. Conduct advanced Data Protection Impact Assessments (DPIAs), and risk assessments to identify and mitigate privacy risks. Prepare and update Records of Processing Activities (RoPAs) mapping the lifecycle of personal data across business processes. Enhance awareness of Privacy initiatives- Use all the channels such as regular communication to all employees, e-modules, workshops, Digi TALKS / relevant stakeholders to keep their awareness level up to date on Data Privacy Build a good connection with stakeholders and drive maximum adoption of overall Privacy initiatives. Prepare mandatory and role-specific privacy training and awareness programs for the organization. Develop and publish metrics- Deliver executive-level reporting on privacy metrics, risks, and program effectiveness. Build and share matrices with CISO and CSC members from Privacy perspective Help CISO to drive Privacy related campaigns Assist with data protection audits and manage privacy risk register for the organization. Special Skills Required Technical Skills: In-depth knowledge of global privacy laws and frameworks, including GDPR, DPDPA, HIPAA, and others. Good understanding of data protection technologies such as DLP, Data classification, CASB, Access control etc. Good understanding of Privacy platforms / technologies to meet DPDP Act or other privacy act requirements. Experience in managing privacy programs, incidents and compliance audits.
