Assistant Vice President – Data Privacy

Role Purpose: Responsible for coordinating, embedding and monitoring of data protection and privacy compliance in accordance with SBI card policies and procedures and applicable regulations.Role Accountability: Align business processes and operational practices, and support in preparation, maintenance and rollout data protection policies and procedures as per the Data Privacy act of India and any other Data Privacy law as applicableReview controls to inform, advise and issue recommendations to the business with regards to data protection, privacy including with data protection laws and internal policies and guidelinesFacilitate periodic data protection impact assessmentsSupport the data incident response and data breach notification proceduresSupport 1st line of defense (controllers/ processors) and Data Privacy officer(DPO) regarding data protection and privacy management requirements and policies as well as for communication for both data subjects (e.g. customers) and the regulatory authoritiesPromote continuous training to maintain data protection awareness and feedback, and also include protection Offer consultation once a data breach or other incident has occurred and must be involved in relevant issues in a timely manner and report directly to highest management levelParticipate and represent team in internal and External audits and assessmentsManage privacy related projects including stakeholder update and drive timely and quality deliverablesMonitor marketplace trends and latest experiences on security, audit and control issuesPerform process documentation and compliance adherenceMeasures of Success: Timely and accurate development and monitoring of the Data Privacy programSetup and increase the maturity of overall Data Privacy ProgramTimely and in-budget completion of data privacy related projects & Initiatives Timely delivery of project plans, milestone updates, presentations, assessment reports etc. to relevant stakeholdersProcess Adherence as per MOUTechnical Skills / Experience / Certifications:Industry-standard certifications such DCPP (DSCI Certified Privacy Professional), DSCI Certified Privacy Lead Assessor (DCPLA),Understanding of regulatory data privacy compliance, Information security or audit background is mustUnderstanding security controls from a people, process and technology perspectiveKnowledge of standard security processes and guidelinesPCI-DSS, ISO27001 and audit management experienceKnowledge of risk assessments and privacy frameworks such as - NIST, DSCI, ISO, PCI, GDPR, etc.Competencies critical to the role:Stakeholder Management Teamwork and Collaboration Detail OrientationMarket AwarenessProcess OrientationQualification: Graduate or advanced course in Computer Science or Information Security related areas or any other relevant discipline.Preferred Industry: FSI