Data Privacy Manager

Job profileData Privacy Manager (DPDPA Implementation)Experience Required:• Experience: Compliance, Legal, or Information Security.• Core Privacy Experience: Minimum 3+ years dedicated to Data Privacy.Position: Data Privacy Manager Department: Risk Management – Data PrivacyWe are looking for a seasoned privacy professional to lead the greenfield implementation of the Digital Personal Data Protection Act, 2023 (DPDPA) at COMPANY.As the Data Privacy Manager, you will work directly under the DPO to architect, build, and operationalize COMPANY’s privacy framework from the ground up. Given COMPANY’s status as a critical financial infrastructure provider and a likely Significant Data Fiduciary (SDF), this role is not merely about compliance checklists; it is about embedding privacy by design into the DNA of India’s depository ecosystem.Key Responsibilities1. DPDPA Implementation Strategy (The "From Scratch" Build)• Gap Analysis: Conduct a comprehensive organization-wide gap analysis against DPDPA 2023 requirements and existing data practices.• Data Mapping & ROPA: Lead the discovery phase to create a dynamic Record of Processing Activities (ROPA). Map data lifecycles across all business verticals (Demat, PAN, e-Governance services).• Policy Architecture: Draft and finalize internal Privacy Policies, Data Retention Policies, and Data Breach Response procedures tailored to the new Act.2. Consent Architecture & Rights Management• Consent Management: Design the technical and legal workflow for obtaining "Verifiable Consent." Collaborate with IT to integrate with Consent Managers as defined in the Act.• Notice Management: Redraft privacy notices (Itemised Notice) to ensure they are available in English and 22 scheduled Indian languages as mandated.• Grievance Redressal: Set up the "Consent Withdrawal" and "Grievance Redressal" mechanisms for Data Principals (investors/clients) ensuring strict SLA adherence.3. Significant Data Fiduciary (SDF) Obligations