Data Privacy - Mumbai

Job Description:

Key Responsibilities:

1. Develop and maintain a comprehensive data privacy program framework including data Privacy Policies, Procedure, Templates & Process documents
2. Ensure that the practices in the Bank are in compliance with DPDP Act, GDPR and other applicable regulations.
3. Play a consulting role for Business Team on all privacy related queries and to provide advice and guidance on data protection obligations and assist the business to understand privacy laws, best practices, and how to handle personal data appropriately.
4. Conduct data privacy risk assessments and implement mitigation strategies.
5. Collaborate with cross-functional teams to integrate data privacy into products and services.
6. Collaborate with IT and security teams to implement data protection measures, such as encryption and access controls and ensure data privacy by design.
7. Perform Privacy Impact Assessment (PIA) as per Banks defined processes
8. Develop and deliver data privacy training programs for employees across different level of within the Bank
9. Manage data principal (customer) requests, incidents, and breaches. (e.g., access, deletion, opt-out) and respond in a timely manner
10. Serve as the point of contact for all data privacy matters.
11. Handle the internal / external audits related to data privacy independently
12. Stay up-to-date with evolving data privacy laws and regulations and update policies accordingly

Eligibility:

• 5+ years of experience in data privacy.
• Overall experience of 10+ years
• Ability to work collaboratively across departments.
• Strong leadership and project management skills.
• Excellent communication and interpersonal skills.
• Strong analytical and problem-solving skills.
• Engineer / Graduate / Masters
• Ability to interact and getting job done from peers and seniors
• Excellent verbal, written communication & presentation skills
• Certification like DCPLA / DCPP/CIPT/CIPM will be added advantage
• Experience in Data Privacy; Experience in Banking (Preferable)
• Knowledge on Data Privacy Laws / Regulations: DPDPA, GDPR, DIFC, etc.
• In-depth knowledge on Data Privacy Concepts: Privacy Impact Assessment, Personal Information Inventory, Subject Access Request, Notice etc.