Data Protection Officer - Information Security

Description :

The Data Protection Officer (DPO) will be responsible for overseeing data privacy, protection, and governance frameworks across the organization. The role ensures compliance with applicable data protection laws and regulations while safeguarding sensitive customer and business data.

Key Responsibility Areas :

- Develop, implement, and maintain the organizations data protection and privacy framework.

- Ensure compliance with applicable regulations such as Digital Personal Data Protection Act (DPDP), RBIguidelines, and other relevant laws.

- Act as the central point of contact for all data protection and privacy-related matters.

- Conduct data mapping, data flow analysis, and maintain records of processing activities.

- Oversee data classification, data retention, and data lifecycle management policies.

- Conduct Data Protection Impact Assessments (DPIA) for new products, systems, and processes.

- Work closely with IT, legal, compliance, and business teams to embed privacy-by-design principles.

- Monitor and investigate data breaches; ensure timely reporting and regulatory notifications.

- Manage third-party/vendor data protection risks and ensure contractual safeguards.

- Drive awareness and training programs on data privacy and protection across the organization.

- Support internal audits, regulatory inspections, and certifications related to data protection.

- Maintain privacy documentation, policies, and periodic reporting to senior management.

Qualifications :

- 12+ years of experience in data protection, privacy, information security, or compliance roles

- Bachelors/ Masters degree in Information Security, IT, Risk Management, or related field

Desired Competencies :

- Strong understanding of data protection principles

- Familiarity with DPDP Act, RBI IT & outsourcing guidelines, and global standards

- Experience in data classification, retention policies, and data lifecycle management