Nangia & Co LLP - Manager - Data Privacy

- Experience in Data Privacy management, Cyber Security Governance spanning to 6-9 years.

- Liaise and engage with various business units at client end and to stay abreast of programs with privacy implications, facilitate program development, and ensure privacy consideration is embedded in the program design stage.

- Manage privacy impact assessment intake from product managers and business owners. Conduct initial privacy impact assessments.

- Coordinate training sessions to business stakeholders on privacy policies and procedures.

- Mandatorily well\l versed with the Indian DPDP Act, GDPR, CCPA, Nigerian DPA, PDP of UAE.

- Assist transactional teams to review and negotiate data privacy and security as needed.

- Work directly with Privacy Officer and business stakeholders to implement data privacy policies and procedures on the collection, use, and sharing of personal information. Draft and maintain global privacy policies and standard operating procedures on the collection, use, and sharing of personal information.

- Monitor privacy mailboxes and triage issues. Engage key stakeholders to resolve issues. Follow standard response procedures and respond to requestors. Create standardized response templates when appropriate. Generate issue metrics for risk identification and management.

- Able to propose and evaluate the Privacy Management Solutions and support in customization for the client to an extent of defining policies.

- Mandatorily have the ability to visualize the flow of Personal Data in the organization and to pragmatically map the data flows.

- Manage and improve the company's ongoing privacy compliance monitoring program to ensure the company maintains proper notice, obtains sufficient consent, responds to privacy inquiries, maintains sufficient contractual or policy guardrails, and follows the best privacy practices. Design and adopt the proper methodology, cadence, and reporting mechanism to validate the current privacy controls are functioning properly. Coordinate with key stakeholders to remediate findings.

- Readily deployable on the Cyber Security Governance and Compliance assignments.