Data Privacy Officer

Job Description

JD for Manager and Senior Manager in Data Privacy - This role will be primarily responsible for supporting, guiding and directing the privacy and data protection compliance of personal data across the organization. This will involve communicating, supporting privacy compliance activities as per existing internal data privacy policies, standards, procedures and best practices, as well as monitoring and evaluating the organization's adherence to these standards and guidelines. In addition to supporting the CISO, the role holder will work closely with various teams, including business areas, corporate functions, legal, IT, Information Security and compliance, to ensure that data privacy and protection requirements are met. Duties & Responsibilities - Establish and govern an enterprise Data Privacy Compliance Program and Implementation Plan Establish and rollout an enterprise wide data privacy framework and operating model, with a focus on areas processing high risk personal data and/or sensitive personal data Outline and support activities to comply with internal data privacy policies and procedures, in order to comply with relevant privacy and data protection regulations and industry best practices Establish a record of personal data processing activities (RoPAs) and mapping. Create data flow maps to understand the lineage and lifecycle of high-risk personal data within the organization Work with Vendor management and handle third-party risk assessments to ensure adequacy of assessment, evaluation and monitoring of third-party vendors that hand personal data, in terms of their data handling practices, security and contracts, to ensure they comply with privacy and data protection requirements Support incident response and breach management process. Work with information security teams to ensure adequacy of incident response plan to handle data breaches or privacy incidents effectively. Coordinate with internal stakeholders and regulatory authorities as required Support business areas and corporate functions in reviewing and updating all relevant Privacy Notices or statements where relevant Conduct internal privacy audits and assessments to identify gaps and areas for improvement. Recommend and implement corrective actions as needed In conjunction with the DPO, Legal, Information Security, IT and other stakeholders, provide regular progress reports to the relevant Stakeholders Education & Experience Requirements - Bachelor's degree in a relevant field (e.g. Computer Science, Information Systems, Law, or a related discipline). Certifications in privacy and data protection (e.g. CIPP, CIPT, CIPM) are preferred Experience working within a Privacy Office for a large global organization or Big-4 Knowledge of global data protection regulations and standards (e.g. GDPR) as well as the new DPDA coming into effect within India Strong understanding of privacy and security frameworks, principles and best practices Strong understanding of data privacy policies, procedures and guidelines Experience with supporting incident response and breach management process Should have extensive experience handing data subject requests Familiarity with data classification, data flows / mapping and personal data inventory methodologies, including records of processing activities capture Analytical mindset with the ability to assess privacy risks and develop practical solutions Strong attention to detail and the ability to work independently as well as in a team Knowledge of privacy compliance tools and technologies, including consent manager, data anonymization tools.