Deputy Head - Privacy & Data Protection - IT

- International privacy certification such as CIPP, FIP or equivalent.

A Legal professional qualification - post graduate diploma or degree is desirable in addition to engineering degree, though not essential.

1. Data Privacy Architecture and Compliance Strategy

The Deputy Head - Privacy & Data Protection will provide strategic directions in developing and deploying a best in-class privacy architecture in the company, in order to ensure global compliance to applicable data privacy regulations. S/he will provide resources including people, tools and training and define the vision, mission and privacy policies for its group, and will work with Head Privacy & Data Protection to ensure the below objectives and actions are undertaken effectively.

2. Policy & Process Implementation

S/he will be responsible for ensuring that necessary process infrastructure is developed and deployed globally to ensure the consistent understanding and deployment of the Organizational Privacy and Data Protection requirements. S/he will ensure that mechanisms are in place to periodically review these for effectiveness and deployment.

3. Program Management

S/he will establish PIMS (Personal Information Management Systems) to ensure that company-wide data inventory is established and maintained, based on which adequate controls and measures are planned and proactively deployed across business processes to be compliant with Organizational Privacy and Data Protection requirements, including data classification and retention. S/he will periodically plan and allocate Data Privacy initiatives with a specific start and end date, and with clearly defined exit criteria and ROI, that will bring in improvements in DP across the organization.

4. Privacy Impact Assessments

S/he will ensure that impact assessments are conducted for any BEF related Initiatives that have an impact on personal data processing. S/he will deploy mechanism by which no such change can be rolled out without clearance from DPO. Any exceptions must be authorized by Head, Privacy & Data Protection.

5. Employee Awareness Program

S/he will review and ensure effectiveness of awareness programs.

6. Risk Management

S/he will ensure DP risks are proactively identified, managed and mitigated, and that any residual risks are accepted by Senior Management and reported to the Risk Office.

7. Data Breach Management

S/he will provide directions for management of data breaches. S/he will also ensure that any reported data breaches are promptly handled in accordance with applicable regulations and processes, and the necessary corrective and preventive actions are instituted.

8. Vendor/Partner Assessment

S/he will set directions for Data Privacy in outsources work to minimize risks to ensure compliance with applicable DP regulations and customer contracts.

9. Though Leadership

S/he will demonstrate brand and thought leadership in the market to establish privacy and Data Protection as a differentiator , S/he will collaborate with external entities including policy makers to influence regulatory and standards development, by means of participation in conferences and industry interactions

10. Quantitative Privacy Compliance Management

S/he will review Data Privacy health of enterprise using quantitative metrics, along with members of the Data Privacy sub-council.

11. Privacy by Design

S/he will be responsible for promoting and conceptualizing privacy by design in applications and systems.

12. Client Enquiries and Audits

S/he will participate in meetings with CPOs of client, in strategic deals when required, and provide directions on Data Privacy compliance.

13. People Management

S/he will monitor and review progress on employee engagement activities, participate in performance management, recruitment, mentoring and related HR processes, plan and lead competency building initiatives and deploy interventions in order to retain and motivate staff.

Knowledge, Skills required for the role

Knowledge: Data Privacy, Data governance, processes, information security, Data Privacy laws & Standards

Skills: Experience in Data Privacy matters both as a Data controller and Data Processor .