Project Role :
Security Architect
Project Role Description :
Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :
Security Data Privacy
Good to have skills :
Security Architecture Design
Minimum 7.5 Year(s) Of Experience Is Required
Educational Qualification :
15 years full time educationSummary: Candidate should be well versed with Data Privacy principles and regulations. They should be aware of Privacy compliance requirements. Candidate should be willing to learn new technologies and skills, Data Privacy tools. He / She has good understanding of information security standards (ISO 27001, ISO 27701 and best practices in general and specific to Data Privacy (GDPR, CCPA, PIPEDA, DPDPA). He / She has hands-on experience on any Data Privacy tool such as One Trust, Securiti.ai , BIG ID etc. He/ She has knowledge on Data Subject Rights, Consent Management, Cookies management, Incident Management, Privacy Notice, Data Protection Impact Assessment, Data Transfer Agreements, Data Processing Agreements, Privacy by Design, RoPA. The candidate should preferably have experience of implementing Privacy Framework, designing Policies, Procedures, performing Gap assessments etc. Roles & Responsibilities:
- Ensure that compliance for Privacy standards & regulations is maintained across all projects. Coordinate with other members of the information security / technology function and end client to implement and sustain appropriate technical (security & privacy) and procedural controls to support this objective. Remain apprised of pending changes to standards and proactively design and apply appropriate measures.
- Understand business objectives and limitations, deliver trainings
- Assisting, delivering the privacy programme & end-to-end as per the contractual requirements
- Exposure to various country specific privacy laws & regulations. Knowledge of DPDA implementation is a key.
- Adept in performing Privacy Impact assessments & Data Protection Impact assessments basis the agreed contractual requirements and applicable privacy laws
- Performing gap assessments based on Regulatory requirements on Privacy.
- Develop, maintain and monitor compliance with Privacy Framework, policies, procedures. Oversee Privacy policies, requirements, awareness & trainings across the organization.
- Develop, design and update Privacy Framework, Policies, procedures , SOPs for Consent, DSR, Privacy Notice, Cookie Management, Incident Management, ROPA etc deploying PbD and regulatory obligations.
- Understanding of Data Transfer Requirements, instruments for cross border data transfer.
- Stay abreast of emerging Data Privacy Regulations , amendments, developments in the domain.
- Data Privacy tools. Implement modules using Data privacy tools identified in the customer environment.
- Upskill , train and coach team to scale up.
- Additional duties, as assigned. Professional & Technical Skills:
- At least 5+ years’ experience in Information Security, Data Privacy, Risk and Compliance
- Hands on experience in at least one of the well know Data Privacy regulations / standards such as GDPR, CCPA, PIPEDA
- Very strong understanding of Privacy principles, Privacy by Design and Regulations
- Should have performed DPIA / PIA assessments, Privacy gap assessments.
- Experience of implementing Consents, Privacy Notice, DSRs, Cookies using Data Privacy tools like Onte Trust, Securiti,ai, Big ID or similar.
- Strong written and verbal communications skills.
- Work in shifts and provides after-hour support when required Additional Information: - The candidate should have minimum 7.5 years of experience in Security Data Privacy. - This position is based at our Gurugram office. - A 15 years full time education is required.