Data Protection Officer

Responsibilities:
Develop, implement, and maintain enterprise-wide privacy and data protection policies, standards, and procedures.
Ensure compliance with the DPDP Act, GDPR, and other applicable privacy regulations.
Conduct and oversee Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
Establish privacy-by-design principles across products, applications, and business processes.
Manage data subject rights requests, consent management, and privacy governance activities.
Oversee third-party privacy risk assessments and data processing agreements.
Lead privacy incident response activities and coordinate regulatory reporting where required.
Maintain records of processing activities and data inventories.
Deliver privacy awareness and training programs across the organisation.
Act as the primary point of contact for privacy-related audits, assessments, and regulatory inquiries.
Requirements:
Master's degree in Information Security, Computer Science, Information Systems, Law, Risk Management, or a related field.
Minimum 10 years of experience in Data Privacy, Information Security, Risk Management, Compliance, or Governance.
Minimum 5 years of experience managing enterprise privacy and data protection programs.
Strong understanding of the DPDP Act, 2023 GDPR, CCPA/CPRA, ISO 27701 ISO 27001 Privacy Risk Management and Data Governance frameworks.

Experience
10-14 yrs