6-8 years overall experience. Out of which 4 years of experience in Data Privacy, Data security auditing & IT / vendor risk management processes.

Must have qualification:

A Bachelors Degree or advance course in Computer Science or Information Security related areas

- One or more Industry-standard certifications such as DSCI Certified Privacy Lead Assessor (DCPLA), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CIPP(Certified Information Privacy Professional), CIPM(Certified Information Privacy Manager), CIPT(Certified Information Privacy Technologist), CISSP (Certified Information Systems Security Professional).

- Experience managing Data Privacy service providers/supplier relationships (Required)

- Should have strong knowledge of risk assessments and privacy frameworks such as - NIST, DSCI, ISO, PCI, GDPR, etc.

Skills Sets Required:

- Understanding of regulatory data privacy compliance, Information security or audit background is must

- Monitor marketplace trends and experiences on security, audit and control issues.

- Understand security controls from a people, process and technology perspective.

- Should be familiar with standard security processes and guidelines.

- Ability to interact and work with various senior stakeholders. Manage congruent relationships among different teams.

- Excellent written & verbal communication & presentation skills.

- PCI-DSS, ISO27001 & audit experience. Strong ability to devise, drive and implement standard processes and best practices (both from security and risk perspective) for all the suppliers.

- Ability to lead, collaborate, challenge and influence peers. Passion for project based execution and process improvement.

- Excellent Documentation, Communication, presentation, interpersonal and leadership Skills

Key Responsibilities:

- Align business processes and operational practices as per the Data Privacy act of India and any other Data Privacy law as applicable

- Review controls to inform, advise and issue recommendations to the business with regards to data protection, privacy including with data protection laws and internal policies and guidelines

- Prepare, maintain and rollout data protection policies and procedures

- Facilitate periodic data protection impact assessments

- Support the data incident response and data breach notification procedures

- Support 1st line of defense (controllers/ processors) and Data Privacy officer(DPO) regarding data protection and privacy management requirements and policies

- Promote continuous training to maintain data protection awareness and feedback, and also include protection

- Support DPO in the communication and as point of contact for both data subjects (e.g. customers) and the regulatory authorities

- Offer consultation once a data breach or other incident has occurred and must be involved in relevant issues in a timely manner and report directly to highest management level

- Participate and represent team in internal and External audits and assessments

Project Management:

- Requires experience leading both people and technology which include managing the Privacy related projects, process improvements and alignment with various information security programs.

- Interface with various business functions and project managers.

- Facilitate meetings including daily stand-ups, issue resolution, and project status meetings.

- Prepare, operationalise the relevant privacy metrics

This job opening was posted long time back. It may not be active. Nor was it removed by the recruiter. Please use your discretion.