Data Protection & Privacy Lead

Role & responsibilities

1. Build a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of protected information across all media types

2. Oversee day-to-day operations and monitor incidents and threats related to data protection & privacy.

3. Monitor end-to-end data lifecycle and create appropriate policies and processes for data disposal.

4. Implement and manage data protection controls for the organization

5. Oversee physical security operations aimed at securing critical data assets like data centers

6. Ensure requisite technologies and systems are in place to control data, securing information for both internal customers (employees) and external customers

7. Scan internal and external environment for identifying threats to data and plan to mitigate the identified risks through improvement in specific processes, policies, or technologies.

8. Align data security governance with the overall data governance for the enterprise.

9. Undertake project management-related duties and/or assignments as directed by senior management

10. Represent ASL on all data regulation forums.

11. Liaise with government bodies to ensure regulatory mandates are duly complied with

Respond to ad-hoc requests and address queries posted by government and other regulator authorities on data privacy and security matters.

Preferred candidate profile

1. Demonstrable experience working in data protection compliance or a related field
2. Expertise in Global & Indian data protection & privacy laws and regulations
3. Experience in using & managing privacy tools like OneTrust, DataGrail, Securiti etc.
4. Certification in ISO 27001 Implementation preferable
5. Certifications on either CISA/CISSP/PMP preferable

6. Strong analytical & problem-solving skills with ability to translate ideas into practical implementation

7. Ability to manage stakeholder relationships including team members, vendors and partners

8. Excellent leadership and communication skills with ability to present and communicate effectively with both technical and non-technical audience

Ability to provide technical and professional leadership, guidance, and training to others.