Senior Role - Governance Data Protection & Privacy - BFS

1 Regulatory Compliance & Advisory

- Advise team (Technology, Digital Banking & Digital Payments) on privacy requirements.

- Ensure compliance with RBI IT/outsourcing guidelines and DPDP Act.

- Embed privacy-by-design in new products (mobile apps, digital lending platforms, KYC processes).

2 Data Protection Risk Management

- Identify and assess privacy risks in Tech & Digital Banking processes (KYC, payments, lending, analytics).

- Conduct and review periodically Data Protection Impact Assessments (DPIAs).

- Maintain privacy risk register and track remediation.

3 Policy & Governance

- Develop and implement data protection policies, standards, and SOPs.

- Align technology Policies/framework with standards such as ISO 27001 / 27701.

- Work with Bank's Data Protection Officer (DPO) in governance activities.

4 Third-Party & Vendor Risk

- Review data protection clauses in vendor agreements (NBFC partners, fintechs, outsourcing vendors).

- Assess third-party data handling risks, especially for cloud and SaaS platforms.

5 Incident & Breach Management

- Support investigation and response to data breaches (e.g., unauthorized access, data leakage).

- Ensure regulatory reporting within defined timelines.

- Conduct root cause analysis and implement corrective actions.

6 Stakeholder Management

Work closely with:

- Information Security & IT teams

- Legal & Compliance

- Digital Banking / Product teams

- Translate regulatory requirements into operational controls.

7 Training & Awareness

- Conduct privacy awareness sessions for employees and frontline staff.

- Drive secure handling of customer data across branches and digital channels.

8 SaaS & AI Data Usage Risk Oversight

- Assess and monitor how SaaS partners and AI service providers collect, process, store, and reuse bank and customer data.

- Evaluate risks related to Data residency and cross-border transfers

- Model training on bank/customer data (especially for AI/ML providers)

- Data retention, deletion, and secondary usage

9 Review AI explainability, bias, and privacy risks in models used for credit scoring, fraud detection, or customer analytics.