Dr. Reddy's - Deputy Officer - Data Privacy

Deputy Data Privacy Officer

Description :

Key responsibilities :

- Establishes, implements, and maintains privacy policies, procedures and controls for the company and continually ensures that the company's policies and procedures comply with applicable laws and regulation

- Understands the principles of data privacy laws and is well versed with data privacy laws of Europe (GDPR) and other evolving laws across the globe.

- Tracks, manages, controls, advises and risk mitigate on data transferred amongst group companies globally and is responsible for defining appropriate procedures in this regard.

- Understands the entire data life cycle and build a governance regime with focus on security, protection and privacy controls across the stages.

- Create, manage and periodically test a comprehensive incident response plans in the event of an unauthorized disclosure of customer and employee data.

- Develops and implements preventive & corrective action plans for identified compliance issues and collaborates with operational teams to implement and maintain any required safeguards and remedial measures

- Maintain a privacy risk register, conduct periodic risk assessments, designs controls for identified risks and oversee the implementation and ongoing maintenance.

- Conduct project reviews and data privacy impact assessments for all new and existing projects, vendor engagements and contractual reviews.

- Administers delivery of training on privacy policies and procedures to all employees as well as appropriate third parties and maintains documentation of all training provided.

- Remains abreast of the industry trends and updates on data privacy and information security issues and topics.

- Participates in new business initiatives and product development activities to promote and implement functionality necessary to support required data privacy and security compliance capabilities

- Collaborates with internal and external assurance functions to ensure that data security and privacy compliance is maintained at all times.

Mandatory Skills :

- ISO 27001 / BS 10012

- Data Privacy Regulations - GDPR, US Privacy Shield, India Data Protection Bill

- Intermediate understanding of application security

- Network and infrastructure security

- Identity and Access management

- Cloud Security

- Data Protection and Privacy controls - logical and technical

- 3rd Party Security

- Incident Management

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.