Assistant Vice President - Risk Management Office

Role Purpose:

To design, assess, and implement technical and security safeguards required for DPDP compliance across applications, infrastructure, and digital platforms.

Key Responsibilities:

A. Privacy Technology Gap Assessment (Primary Owner):

- Assess current systems against DPDP technology requirements:

1. Access controls & RBAC

2. Encryption at rest and in transit

3. Logging, monitoring, and audit trails

4. Data retention and automated deletion

5. Data minimization & masking

6. Engage with Privacy Operations to stitch RoPA with technical standards, APIs, etc.

- Document technology gaps, risks, and remediation plans.

B. Privacy-by-Design & SDLC Integration:

- Review new systems, products, and changes from a privacy lens.

- Ensure privacy controls are embedded into SDLC and architecture.

C. Incident & Breach Support:

- Support detection, investigation, and containment of privacy incidents.

- Coordinate with InfoSec on breach response and root cause analysis.

D. Privacy Tooling & Automation:

- Evaluate and implement:

1. Consent Management Platforms (CMP)

2. DPAR automation tools

3. Data discovery & classification tools

4. Breach management and incident reporting

5. Reporting to DPB and internal operations

Skills Required:

- Experience in IT Applications, security, IAM, application security, or infrastructure.