Nykaa - Data Protection Manager

Nykaa is looking for an experienced professional for Data Privacy and Protection. The role requires collaboration with various stakeholders for data mapping, conducting risk assessments, structuring data retention and purging strategies, etc. The candidate should possess enough technical knowledge to answer detailed questions around local and international regulations, do detailed data flow analysis (including third party applications/panels used at Nykaa).

The person should have an overall experience of 6+ years in Information Security domain with the last 3+ years of experience working in Data Privacy and Protection especially GDPR. CIPP or DCPP certifications would be a plus.

Key Responsibilities

1. Identify and evaluate the company's data processing activities

2. Prepare data flows for various processes

3. Conduct assessments (e.g. privacy impact / risk & controls) of applications, products, processes, and third parties to evaluate compliance with laws, regulations, and internal standards

4. Maintain records of processing operations

5. Assisting in implementation of data protection laws and embed awareness amongst employees.

6. Ensure Nykaa address all queries from data subjects within legal timeframes (e.g. delete their information from our databases)

7. Draft / update policies, guidelines, procedures and documentation wrt to any change in law or process

8. Arrange for training on GDPR compliance or any other regulation for employees

9. Follow up with changes in law and issue recommendations to ensure compliance

10. Conduct third party security risk assessments

11. Follow up to close all identified gaps with third parties

Qualification/Skill

1. Graduate in Computer Science

2. 6-9 years in Information Security with minimum 3 years of experience in Data Protection and Privacy

3. Experience in data protection and legal compliance

4. Solid knowledge of GDPR and national data protection laws

5. Knowledge of data processing operations in the eCommerce sector is preferable

6. Ability to handle confidential information

7. Ethical, with the ability to remain impartial and report all non-compliances

8. Organizational skills with attention to detail

9. CIPM or DCPP training would be desirable