Description: We're Hiring: GDPR Compliance Manager!

We are looking for an experienced GDPR Compliance Manager to lead our data protection efforts and ensure compliance with the General Data Protection Regulation.

The ideal candidate will have a comprehensive understanding of data privacy laws, risk management, and best practices in data governance.

Location: Bangalore Urban, India.

Work Mode: Flexible office & remote.

Role: GDPR Compliance Manager.

Overview:

The GDPR Manager is responsible for designing, implementing, and maintaining a strong data protection and AI governance framework across the organisation.

This role ensures compliance with GDPR, the EU AI Act (as applicable), and other privacy regulations.

The GDPR Manager works closely with cross-functional teams to embed privacy by design and maintain a high level of organisational awareness and accountability.

Key Responsibilities:

Policy Development & Governance:

- Create, update, and maintain key data protection and AI governance policies.

- Develop privacy and cookie notices, including specific notices for staff where required.

- Maintain the Record of Processing Activities (RoPA).

- Establish group-wide GDPR and AI handling standards for all group entities.

Process Establishment & Compliance Operations:

- Develop efficient processes for individual rights requests (e.g., access, erasure).

- Implement processes for personal data incident management and reporting.

- Conduct or support DPIAs, TIAs, and related risk assessments.

- Promote and support privacy-by-design across systems and products.

- Govern internal and external AI tools, systems, and processes.

Advisory & Stakeholder Collaboration:

- Partner with Marketing, Product, HR, IT/Tech, Procurement, and other teams to provide timely, proactive privacy and AI compliance guidance.

- Stay informed about business changes and ensure risks are managed early.

Contracts, Vendors & M&A Support:

- Review Data Processing Agreements (DPAs) and perform vendor privacy assessments.

- Update privacy-related policies for different business areas.

- Create templates for DPAs, TIAs, and due diligence checklists.

- Support M&A activities by identifying key privacy and AI governance risks in target companies.

Training & Awareness:

- Develop and deliver privacy and AI compliance training programs.

- Provide onboarding sessions and advanced training for teams handling sensitive data or AI tools.

Internal Audit & Documentation Management:

- Establish an annual audit plan to regularly test privacy and AI program effectiveness.

- Maintain a central repository of all policies, processes, templates, assessments, and audit outputs.

- Ensure documentation is reviewed, approved, updated, and version-controlled regularly.

Contact Person Responsibilities:

- Serve as the primary contact for consumers, employees, partners, and supervisory authorities.

- Manage inquiries, complaints, and regulatory communication via the privacy inbox or designated channels.

Optional: DPO Responsibilities (If Applicable):

- Register as DPO with relevant supervisory authorities.

- Report regularly to the Board on privacy risks, program status, gaps, and resource needs.

- Ensure and document the independence of the DPO function.

Required Skills & Qualifications:

- 15+ years of proven experience in GDPR compliance, privacy management, or data protection roles.

- Strong knowledge of GDPR, privacy principles, and (ideally) the EU AI Act.

- Experience conducting DPIAs, TIAs, and managing incident response processes.

- Excellent stakeholder management and communication skills.

- Ability to translate regulation into practical, business-friendly guidance.

- Strong organizational skills with the ability to manage multiple ongoing priorities.

- Preferred certifications: CIPP/E, CIPM, CIPT, or equivalent.