Assistant General Manager - Data Privacy & Consent Frameworks

Role Overview:

The Consent Manager will work under the Data Protection Officer Office and manage the complete lifecycle of user consent for data-processing activities across the Bank. The role will ensure that consent collection, recording, storage, use, modification and withdrawal mechanisms comply with applicable data-protection laws and regulatory requirements.

Key Responsibilities:

- Design, implement and manage an enterprise-wide consent-management framework and lifecycle processes aligned with the Digital Personal Data Protection Act and applicable regulatory guidelines.

- Ensure the lawful collection, recording and management of user consent across digital and offline channels.

- Maintain centralised consent repositories with appropriate audit trails and version control.

- Enable mechanisms for consent withdrawal, modification and grievance handling.

- Collaborate with technology and business teams to integrate consent-management systems into applications, portals and customer journeys.

- Manage third-party consent sharing and ensure compliance with contractual and regulatory obligations.

- Assist the Data Protection Officer with regulatory reporting, inspections and consent-related compliance documentation.

- Monitor adherence to statutory service timelines, serve as the coordination point for consent-related grievances and work with business and technology teams to ensure timely resolution.

- Undertake any other responsibilities assigned by the Bank from time to time.

Mandatory Eligibility Criteria:

Age:

The candidate must not be more than 40 years of age as on April 30, 2026.

Educational Qualification:

Graduate degree in Information Technology, Computer Science, Law, Data Governance or Business Administration from a recognised university or institute.

Experience:

- At least 10 years of overall experience in managing IT applications or information risks.

- At least 4 years of relevant experience in data privacy, IT audit, risk and compliance, or data governance, preferably in a bank, NBFC, DFI, fintech or another regulated environment.

- At least 2 years of experience in handling information-security risk.

Required Hands On Experience:

- Designing or managing consent-management platforms or workflows.

- Implementing consent artefacts across digital products or customer journeys.

- Working with Legal, Compliance, IT and Business teams.