Data Privacy Executive (0-2 Years)
Gostravvy · Ahmedabad · onsite · Posted 1d ago
About a minute. You'll make an account on the way through.
About this role
We are seeking a proactive Privacy Executive to support our data protection and privacy
compliance program in a fast-paced fintech environment. The role will focus on safeguarding
financial and personal data, ensuring compliance with laws such as the DPDP Act (India), RBI
guidelines, and global privacy frameworks, and enabling secure product and business
operations.
Job Summary:
We are seeking a proactive Privacy Executive to support our data protection and privacy
compliance program in a fast-paced fintech environment. The role will focus on safeguarding
financial and personal data, ensuring compliance with laws such as the DPDP Act (India), RBI
guidelines, and global privacy frameworks, and enabling secure product and business
operations.
Key Responsibilities:
1. Regulatory & Privacy Compliance
- Assist in implementation and monitoring of privacy compliance programs aligned with DPDP
Act, RBI IT & outsourcing guidelines, and global standards (GDPR, ISO 27701).
- Maintain and update privacy policies, consent frameworks, and customer-facing notices for
digital platforms (apps/web).
2. Data Mapping & Governance
- Support creation and maintenance of data flow maps for financial products
- Create & Maintain Records of Processing Activities (RoPA) specific to customer financial and
transactional data.
3. Product & Business Support
- Work with product and tech teams to embed privacy by design in fintech solutions.
- Review new features, APIs, integrations, and partnerships for privacy
4. DPIAs & Risk Assessments
- Assist in conducting Data Protection Impact Assessments (DPIAs) for new fintech products
and vendor onboarding.
- Identify privacy risks in various products & process including analytics use cases.
5. Customer Data Rights & Grievance Handling
- Assist & manage data principal (may be through automated tools)
- Coordinate with internal teams to resolve privacy complaints within regulatory timelines.
6. Incident & Breach Management
- Support investigation and documentation of data breaches
- Assist in regulatory reporting (RBI, CERT-In where applicable).
7. Third-Party Risk Management
- Support privacy review of vendors, & other associated partners
- Review and negotiate data protection clauses in agreements (NDAs, DPAs, outsourcing
contracts).
8. Training & Awareness
- Conduct awareness sessions for employees on customer data protection, phishing risks, and
financial data confidentiality.
- Assist in promotion of a strong data privacy culture across business units.
9. Documentation & Reporting
- Maintain dashboards, compliance trackers, audit logs, and privacy documentation.
- Support internal/external audits and regulatory inspections.
- Support in the Implementation of ISO 22301, 27701 & 42001 in the Company.
Qualification:
LLB/LLM + CIPM/CIPPE + ISO 27701 LI, ISO 27001 LI
Mandatory Skills:
Data Privacy | Privacy Law | Data Privacy Law | Data Structures | Data Analytics | Records
Management
Sourced from naukri