Team Member-MK211

Job Summary:

Responsible for embedding privacy and data protection requirements into technology systems, processes, and products to ensure compliance with applicable data protection laws and regulatory requirements. The role works closely with technology, information security, digital, data, and business teams to implement Privacy by Design, consent management, data principal rights management, data governance controls, and privacy risk assessments across the technology ecosystem. The individual responsible for privacy compliance through technology solutions, monitors privacy controls, supports audits and regulatory requirements, and ensures secure and compliant processing of personal data.

Job Role: Data Privacy Professional

Reports to: Data Protection officer (DPO)

Function: CTO Function

Key Responsibilities:

• Support in driving the implementation of the Digital Personal Data Protection Act, 2023 (DPDPA) requirements across business, technology, and operational functions.

• Collaborate with Technology, Product, Legal, Compliance, Information Security, and Business teams to operationalize DPDPA controls.

• Review and implement requirements related to consent management, notice management, purpose limitation, data minimization, retention/ deletion, and data principal rights.

• Review the current architecture, enterprise-wide data discovery, data mapping, and Record of Processing Activities (RoPA)/ Data Protection Impact Assessments (DPIA) initiatives to suggest improvements and assist in operationalization.

• Support implementation of processes for handling Data Principal requests, consent withdrawal, grievance redressal, and personal data breach management. Review third-party and vendor data processing arrangements to ensure compliance with DPDPA obligations.

• Track regulatory developments and assist in implementing new privacy requirements and governance frameworks.

• Support privacy audits, regulatory examinations, compliance assessments, and management reporting related to DPDPA implementation.

Preferred Experience:

• 8 - 10 years of experience in Data Privacy, Technology, Compliance or Information Security.

• Hands-on experience in DPDPA implementation programs, privacy transformation initiatives, or regulatory compliance projects preferred.

• Experience conducting data mapping exercises, business integration with consent management, privacy risk assessments, and DPRM operationalization.

• Experience working on Data Privacy, Information Security, Data Governance, Technology Risk, Regulatory Compliance, or Digital/Technology Transformation functions, preferably within Banking, Financial Services, FinTech, or other regulated industries.

• Good understanding of banking products, customer journeys, digital banking channels, payments, lending, cards, deposits, and wealth management products.

• Ability to partner effectively with Technology, Product, Information Security, Compliance, Legal, Risk, and Business teams to drive privacy compliance while enabling innovation.

Education:

• Bachelor's degree in engineering, Computer Science, Information Technology, Information Systems, Cyber Security, Data Science, or a related discipline from a recognized university.

• Minimum 4-5 years of experience in Data Privacy, and overall, 8-10 years of experience in Information Security, Data Governance, Risk Management, Technology Compliance, or related domains.

Preferred Certifications:

Professional privacy certifications will be preferred, including:

• CIPM (Certified Information Privacy Manager)

• CIPT (Certified Information Privacy Technologist)

• CIPP/E, CIPP/A, or CIPP/US

• CDPSE (Certified Data Privacy Solutions Engineer)

• Certified Data Protection Officer (CDPO)

• ISO 27701 Privacy Information Management certification