Data Privacy Officer

Role & responsibilities

• Design, implement, and continuously enhance enterprise-wide privacy controls, policies, standards, and compliance frameworks.
• Lead and drive implementation initiatives related to GDPR, Digital Personal Data Protection (DPDP) Act, and other applicable privacy regulations.
• Manage and oversee the operational activities of the Data Protection Officer (DPO) Office, including governance, reporting, compliance monitoring, and stakeholder engagement.
• Integrate privacy-by-design and privacy-by-default principles into products, technologies, business processes, and AI-enabled solutions. Collaborate with Engineering, Information Security, Product Management, Risk, Compliance, and Legal teams to implement practical and scalable privacy controls.
• Conduct privacy assessments, data mapping, privacy impact assessments (PIAs), and risk assessments across systems and applications.
• Evaluate, monitor, and address emerging privacy, security, and governance risks associated with frontier AI models, machine learning systems, and advanced data processing technologies.
• Drive adoption and implementation of Privacy Enhancing Technologies (PETs) such as anonymization, pseudonymization, differential privacy, federated learning, and secure data-sharing techniques.
• Establish privacy governance mechanisms for handling personal data throughout its lifecycle, including collection, processing, storage, sharing, and disposal.
• Support internal and external audits, regulatory inspections, and compliance reviews.
• Provide leadership, guidance, and awareness programs to strengthen the organization's privacy culture and data protection maturity.
• Engage with senior management and regulatory stakeholders on privacy strategy, compliance posture, and risk mitigation initiatives.

Requirements

• 7 to 11 years of overall professional experience, with a minimum of 4 years of deep, hands-on experience in privacy control implementation and privacy program management.
• Strong Information Security knowledge with the ability to understand and translate technical risks into privacy controls and governance requirements.
• Proven experience in implementing and operationalizing GDPR and DPDP compliance frameworks.
• Solid understanding of privacy risk management, data governance, consent management, data subject rights, cross-border data transfers, and breach management processes.
• Working knowledge of frontier AI models and the associated privacy, governance, ethical, and regulatory challenges.
• Hands-on experience with Privacy Enhancing Technologies (PETs) and modern privacy engineering concepts.
• Engineering or technology background preferred, with the ability to engage effectively with technical teams.
• Experience in the Banking, Financial Services, and Insurance (BFSI) sector is mandatory.
• Strong understanding of banking operations, digital payments ecosystems, payment products, and regulatory expectations in the financial sector.
• Excellent stakeholder management, communication, and leadership skills.

Professional certifications such as CISSP, CIPP, CIPM, AIGP, or equivalent privacy and security credentials will be highly preferred.