Manager - Data Protection & Privacy

Role Overview: As a Data Protection and Privacy Manager, your role will involve overseeing the organization's data protection strategy to ensure compliance with Indian laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill. You will work closely with the Data Protection Officer (DPO) and regulatory authorities to process sensitive data securely and ethically, safeguarding digital assets and maintaining compliance with industry standards and laws. Key Responsibilities: - Ensuring legal compliance with data protection laws such as the local DPDPA, IT Act, and international regulations like GDPR. - Developing and implementing data protection policies and guidelines organization-wide. - Investigating and reporting data breaches to relevant authorities within specified timeframes. - Conducting training sessions for employees on data protection practices and raising awareness about privacy policies. - Performing Data Protection Impact Assessments (DPIA) to identify risks and recommend mitigation strategies. - Maintaining detailed records of data processing activities to meet legal obligations. - Acting as the point of contact for individuals for grievances related to data handling or privacy violations. - Maintaining records of all data processing activities and policies for audit and regulatory purposes. - Liaising with regulatory agencies and stakeholders regarding data protection matters. Qualifications Required: - Bachelor's degree in Information Security, Computer Science, or Law. - Mandatory certification in Data Protection or Privacy Management such as CDPP, CDPO, CIPM, CDPSE, or DCPP. - 8-10 years of experience in security management. - Strong understanding of IT infrastructure, data security best practices, and frameworks. - Familiarity with regulatory requirements and compliance standards such as RBI and SEBI. - Excellent communication, interpersonal, analytical, and leadership skills. - Knowledge of emerging technologies, their impact on data protection, and the ability to handle sensitive information discreetly.,