Data Governance Manager

Role Summary

Own the design, build-out, and enterprise-wide operationalisation of a Data Protection Governance Framework target operating model, policies, RACI, and controls aligned to DPDP Act 2023, GDPR, ISO/IEC 27701, and applicable sectoral regulations. Reporting to the Technical Director, the incumbent drives buy-in across Business, IT, Security, and Compliance leadership and embeds accountable, auditable data protection practices organisation-wide.

Key Responsibilities

1. Design and develop the enterprise-wide Data Protection Governance framework and target operating model (TOM), aligned to regulatory and business requirements.

2. Define and establish clear roles and responsibilities, including a detailed RACI matrix, aligned to regulatory and business requirements.

3. Cascade roles, responsibilities, and RACI matrices across Business, IT, Security, and Compliance, closing ownership gaps on personal data processing.

4. Draft and maintain data protection policies, SOPs, and playbooks (consent, data subject rights, breach notification, retention).

5. Oversee personal data inventories, data flow mapping, and Records of Processing Activities (RoPA).

6. Establish DPIA/PIA methodology and embed privacy-by-design into project lifecycles.

7. Set up governance forums, reporting cadences, and KPI dashboards to track framework effectiveness.

8. Drive regulatory/audit readiness, third-party data governance, training, and breach/incident response.

Core Domain

• DPDP Act 2023 & GDPR
• Governance operating model design
• RACI matrix development
• Data mapping / RoPA
• DPIA / PIA methodology
• ISO/IEC 27701 & ISO 27001
• Sectoral regs (RBI/SEBI/IRDAI)
• Breach & incident mgmt

Qualifications

• Bachelor's/Master's in Law, Business, IT, or related field
• 10–15 years in data privacy, InfoSec governance, or risk & compliance, incl. 3–5 years in a leadership capacity
• Certifications preferred: CIPP/E, CIPM, DCPP/DPO, ISO 27701 LI, CISA/CISM/CRISC
• Regulated-industry experience (BFSI, healthcare, IT/ITES) preferred