Job Title: Senior Manager - Data Privacy Steward (HR Operations)

Location: Gurugram, Haryana

Department: Human Resources

Reporting To: HR Operations Head

Employment Type: Full-time

Job Summary:

We are seeking a highly skilled and detail-oriented professional to lead data privacy and governance initiatives within HR Operations. This role will ensure full compliance with applicable data protection laws (including India's DPDP Act, 2023), manage vendor contracts from a privacy perspective, and oversee access controls and reporting mechanisms across HR systems. The ideal candidate will be a top-tier B-school graduate with 4-5 years of experience, strong analytical skills, and excellent communication and presentation abilities.

Key Responsibilities:

1. Data Privacy & Compliance

- Implement and monitor HR data privacy policies in line with the Digital Personal Data Protection Act (DPDP), 2023 and global standards like GDPR

- Ensure no employee data is shared with anyone without explicit approval from the Information Security team and Data Privacy Champion.

- Conduct Data Protection Impact Assessments (DPIAs) for new HR systems, processes, or vendor engagements

- Maintain documentation of data processing activities and ensure transparency with employees regarding data usage.

2. Vendor Management & Contractual Oversight

- Coordinate with third-party HR vendors to ensure contractual compliance with data protection laws.

- Review and negotiate Data Processing Agreements (DPAs) to include clauses on confidentiality, breach notification, audit rights, and sub-processor approvals.

- Conduct risk assessments and due diligence on vendors handling personal data.

3. Access Control & Reporting Governance

- Review existing HR reports and dashboards for data access appropriateness; recommend and implement changes to restrict unnecessary access[3].

- Collaborate with IT and HRIS teams to define and enforce role-based access controls and other access models.

- Lead periodic user access reviews and ensure alignment with organizational policies.

4. Data Governance & Quality

- Define and maintain data dictionaries, taxonomies, and metadata standards.

- Conduct regular data audits to ensure accuracy, completeness, and integrity of HR data.

- Resolve data discrepancies and ensure consistency across systems.

5. Stakeholder Engagement & Training

- Act as the privacy liaison between HR, InfoSec, Legal, and external vendors.

- Develop and deliver training programs for HR staff on data privacy and protection protocols.

- Prepare and present privacy compliance reports to senior leadership.

Qualifications & Skills:

Education:

- MBA/PGDM from a top-tier B-school (IIMs, ISB, XLRI, etc.)

Experience:

- 4-5 years of experience in HR operations, data governance, or related fields.

- Prior exposure to data privacy laws, vendor management, and HR systems preferred.

Technical Skills

- Proficiency in Excel, PowerPoint, and data visualization tools.

- Familiarity with HRIS platforms and access control frameworks (RBAC, ABAC).

- Understanding data lifecycle management, data quality, and data protection technologies.

Soft Skills:

- Strong analytical and problem-solving abilities.

- Excellent verbal and written communication.

- Ability to influence cross-functional teams and manage stakeholders.

Preferred Certifications:

- Certified Data Privacy Professional (CDPP) or equivalent.

- Certified Information Privacy Manager (CIPM) or Certified Data Steward (CDS).