Data Protection Officer

About Servify:

Servify is a global product lifecycle management platform transforming the after-sales service experience. Founded in 2015 and headquartered in India, Servify connects leading OEM brands with their sales and service ecosystems to deliver seamless customer support and service operations. Servify partners with leading brands, retailers, distributors, insurers, service providers, and carriers across Asia, North America, Europe, and the MENA region.

Servify embraces and values diversity and is committed to be an equal opportunity employer. We welcome applications from all members and will give equal consideration to all irrespective of age, disability, gender, sexual orientation, ethnicity, nationality, religion or belief.

Why Join Servify?

At Servify, you'll be part of a fast-growing global technology company that encourages innovation, ownership, and continuous learning. We offer competitive compensation, ESOPs, employee-friendly policies, modern collaboration tools, professional development opportunities, and benefits that help you do your best work.

Position Summary: Servify is looking to engage a Global Data Protection Officer (DPO) & Global Privacy Lead, based in India, with 7+ years of PQE to lead the organization’s global privacy and data protection framework. The role will serve as the enterprise-wide authority for data protection, privacy governance, regulatory compliance, and privacy architecture across Servify’s operating geographies, including India, USA, Canada, EU, UK, Turkey, KSA, UAE, Kuwait, Oman, Bahrain, and Qatar. Based in India to support statutory requirements under the Digital Personal Data Protection Act, 2023 (DPDPA), the DPO will oversee cross-border privacy compliance, regulatory registrations, data subject/data principal rights and grievance mechanisms,privacy risk management, incident and breach response, and continuous improvement of Servify’s global privacy maturity. The role will work closely with Legal, Technology, Information Security, Product, HR, and Business teams to embed privacy-by-design and ensure compliance across all global operations.

Key Responsibilities:

• Lead global data privacy and protection initiatives, ensuring compliance with applicable privacy regulations across Servify’s operating geographies.
• Act as the designated Data Protection Officer (DPO) for the Indian entity and coordinate with relevant regulatory authorities, where required.
• Provide strategic guidance to internal stakeholders on data privacy, protection, governance, risk management, and regulatory requirements.
• Develop, review, and maintain privacy policies, SOPs, consent mechanisms, data retention practices, and data sharing/processing agreements.
• Manage cross-border data transfers, including SCCs, Data Transfer Agreements, DPIAs, and related privacy controls.
• Oversee Record of Processing Activities (RoPA), DSAR registers, privacy audits, vendor assessments, and other data protection records.
• Lead the end-to-end Data Subject Access Request (DSAR) and grievance management process, ensuring timely and secure resolution.
• Act as the key SPOC for privacy audits, regulatory inquiries, investigations, and compliance assessments.
• Lead data breach and privacy incident response, including investigation, containment, remediation, escalation, and regulatory/data-subject notifications.
• Drive Privacy by Design and Privacy by Default across products, technology developments, integrations, and business processes.
• Assess privacy risks associated with AI/ML models, new products, high-risk processing activities, and technology implementations, and recommend appropriate controls.
• Partner with Technology, Information Security, Product, Legal, HR, Operations, and other functions to embed privacy controls across the organization.
• Develop and maintain privacy compliance dashboards and management reports, highlighting key risks, gaps, and remediation status.
• Develop and deliver data protection training and awareness programs for employees across the organization.

Requirements:

• Must be a full-time resident of India and available to support global operations.
• 12–18+ years of experience in data privacy, legal/compliance, cyber risk, regulatory affairs, or related areas, preferably within global technology, SaaS, TPA, consumer finance, or enterprise platforms.
• Meet the legal and professional requirements to be appointed/registered as a DPO with applicable regulatory authorities across Servify’s operating geographies.
• Strong and up-to-date knowledge of global data protection laws, regulations, regulatory guidance, notifications, and compliance requirements relevant to Servify’s business.
• Strong understanding of cloud platforms, engineering environments, data localization, encryption architectures, cookie compliance, AI/ML, Large Language Models (LLMs), and emerging privacy risks associated with AI.
• Hands-on experience implementing and managing enterprise privacy platforms such as OneTrust, Securiti.ai, TrustArc,BigID, or similar solutions.
• Ability to translate complex privacy and regulatory requirements into practical, actionable guidelines and controls for IT, Information Security, Audit, Legal, Product, and Business teams.
• Strong communication and stakeholder management skills, with the ability to present privacy risks, compliance matters, and recommendations to senior leadership, Board, and C-Suite stakeholders.
• LLB/LLM or B.Tech/M.Tech in Computer Science from a recognized institution.
• At least two relevant privacy/cybersecurity certifications are highly preferred, such as CIPP/E, CIPP/A, CIPM, CIPT, FIP, CISA, or CDPSE.