Associate Manager - Data Privacy

Associate Manager - Data Privacy

Job Description:

We are seeking a highly motivated and detail-oriented Associate Manager to join our Data Privacy team. This role involves assisting in the development, implementation, and maintenance of our data privacy program. As an Associate Manager - Data Privacy, you will help drive privacy initiatives and ensure organizational compliance with applicable data protection regulations, including India’s Digital Personal Data Protection Act (DPDPA). The ideal candidate will have a strong understanding of data privacy laws, regulations and best practices, coupled with excellent communication, critical thinking, and analytical skills. On a day-to-day basis, you will be expected to leverage your expertise in privacy laws, concepts, and industry standards to understand and navigate complex environments and ensure robust privacy practices.

Location: Bangalore, HQ, full-time

Reports to: Senior Manager - Data Privacy

Function: Data Privacy, Data Governance, and Data Ethics | Compliance

Key Responsibilities:

● Assist in the development and implementation of privacy program components, including drafting and refining policies, procedures, and templates; assist in DPDPA implementation efforts
● Collaborate with business and product teams to assess and understand the organization’s use of personal data; serve as the key privacy advisor and point of contact for internal stakeholders, guiding privacy-related decisions.
● Research and monitor evolving privacy laws, regulations, and industry practices / trends, and analyse their impact on our business.
● Conduct Data Protection Impact Assessments (DPIAs) and risk assessments to proactively address and mitigate privacy risks.
● Enhance the organization’s existing consent management framework in alignment with legal and regulatory requirements, ensuring seamless integration across functions.
● Review privacy clauses in vendor contracts and ensure compliance with data protection requirements; provide assistance on the third party risk management process to mitigate privacy risks.
● Help investigate and manage privacy incidents, including support with reporting and resolution.
● Support in handling data principle requests and ensure timely responses; assist in addressing queries related to data privacy rights and data protection practices.
● Assist with continuous monitoring and testing of existing privacy controls implemented across businesses, identify gaps, and initiate corrective measures.
● Assist data discovery activities across the enterprise; ensure maintenance of personal data inventory.
● Assist design and delivery of mandatory privacy training and role-specific awareness programs to increase privacy awareness.

Qualifications and Requirements:

● Bachelor’s / Master’s Degree in Computer Science, Law, Information Security, Privacy, or related fields
● 4-6 years of overall experience working in the Privacy domain
● In-depth knowledge of global privacy laws and frameworks, including GDPR, DPDPA, CCPA, Information Technology Act, and regulations from RBI, SEBI, IRDAI and other regulators
● Strong documentation and communication skills and proficiency with framework development, assessments, and policy and procedure documentation; advanced working knowledge of MS Office applications
● Team player; ability to interface and build relationships with stakeholders
● Strong bias for action with exceptional problem solving skills

Good to have:

● Professional certifications such as DCPP, DCPLA, CIPP/E, CIPM, CIPT, or equivalent are desirable
● Experience working in the FinTech industry and understanding of various products and services