MUST HAVE Key experience we are looking for:

- Qualified lawyer with at least 5+ years Post qualification experience in legal and data privacy.

- Currently in a Legal function, or in a privacy/compliance role with prior experience as a data privacy lawyer.

- GDPR and/or India DPDP Act experience.

- Advising business stakeholders on data privacy issues.

- Drafting and negotiating DPAs and privacy provisions.

- Cross-border data transfers.

- Privacy notices and consent language.

- Commercial contracting experience.

Preferred backgrounds:

- In-house legal teams at banks, fintechs, payments or technology companies.

- Law firms with technology, privacy or data protection practices.

NOT LOOKING FOR CORE EXPERIENCE IN BELOW:

- Privacy compliance programmes.

- Privacy operations.

- TPRM / vendor risk.

- Privacy governance.

- Controls and testing.

- Audit and compliance.

- Data governance.

- Information security compliance.

Basic/ Essential Qualifications:

- Provide day-to-day advisory on data privacy and management in India and escalate to APAC Data Legal on complex issues to align best practices with the global agenda.

- Act as Subject Matter Expert (SME) for data privacy and governance, support stakeholders on the ground including EIP Legal, CIT Legal, Country Legal, Country Compliance and DP Compliance, and assist with global contracts and projects impacting India and its entities.

- Negotiate and/or address ad hoc queries on new privacy policy and consent wording for employees as well as clients of IB, CB and PB in India and Gift City.

- Negotiate and/or address ad hoc queries from Procurement and/or Sourcing on the use of new template contracts with suppliers (e.g., General Terms, PO, Short Form Agreements outsourcing agreements, data processor supplemental agreement).

- Assist with external consultant to maintain a comprehensive and up-to-date data inventory in India. Provide support to the Global team on completing Data Transfer Impact Assessment (DTIA) and/or reviewing output to be provided to data subjects in response to Data Subject Access Requests (DSAR).

Essential Skills / Basic Qualifications:

- Bachelors or Masters degree in Law and a qualified lawyer in India with a tenured experience, preferably in an established global financial institution or law firm.

- Demonstrate legal risk management and communication skills including experience with managing multiple stakeholders and be a pro-active team player.

- Highly motivated and ability to deliver quality work independently and consistently.

Desirable skillsets/ good to have:

- Strong ability to grasp new areas of law, and laws of non-India jurisdictions quickly.

- Adaptable and able to tackle a wide variety of issues - proactively seek solutions and offer solutions/recommendations.

- Genuine interest in this area of the law and has exposure to topical developments in regulatory changes and development in Asia.

- Some experience with US, EU and/or Asia data-related regulation.

- Demonstrates a solid understanding of GDPR and India Digital Personal Data Protection Act and Rules.

- The following qualifications / certifications are preferred: CIPP (IAPP) - CIPP/A and/or CIPP/E; CIPM or CIPT; and ISO 27001 or equivalent privacy/security certifications.