AddressSpecific Skills
- Highly developed specialist knowledge in the General Data Privacy laws & Regulation across geographies.
- Expert knowledge of data privacy laws and practices.
- Knowledge of Information lifecycle, Data Flow areas.
- Extensive knowledge of Information Governance disciplines.
- Skill of interpretation of national guidance and legislation and subsequent local implementation.
- Flair for managing staff and implementing budgets, Training, Delivery.
- Capacity to work with cross functional teams, attention to detail, organizational skills and multitasking.
- Strong management, motivational & leadership skills with ability to drive large change management programs within organizations.
- Ability to maintain confidentiality and deal with situations in a sensitive manner.
- Ability to communicate across all organizational boundaries in an appropriate manner
Educational Qualification and Work Experience
- Graduation or its equivalent
Preferred Professional Certification:
- Certified EU GDPR Foundation,
- CIPP (Certified Information Privacy Professional), CIPT (Certified Information Privacy Technologist),
- CIPM (Certified Information Privacy Manager) etc
- DCPP, DCPLA
Experience
- Minimum 15 years' post qualification work experience
- Corporate Sector out of which at least 10 years' experience should be in BFSI Sector.
- Preferred: Experience in Data Privacy Laws & Regulations and other Data
- Hands on Experience on One Trust Privacy Suite - Good to have
Key Responsibilities
- Ensuring Bank's compliance with the Data Protection & Privacy legislation in India and other countries.
- Develop and manage Bank's Data Protection strategy in India, including the development and implementation of Bank's Data Protection policy and procedures.
- Undertake periodic Data Protection audits or reviews, including all relevant manual filing systems, archived systems and back up data, in order to ascertain Bank's compliance with Data Protection legislation.
- Undertake necessary measures to rectify any deficiencies identified by the audit.
- Conduct data privacy impact assessment (DPIA).
- Submit reports on data privacy laws.
- Collaborate with supporting functions (Legal, IT & InfoSec, Compliance etc.) to stay up to date with new processes and policies.
- Maintain records of processing operations [Personally Identified Information (PII) & Data flow Diagram (DFD)].
- Provide education, training and awareness to all staff members on the requirements of Data Protection. legislations and care & handling of personal data to ensure that relevant business functions are made aware of both their legal responsibilities as well as steps to be taken for their compliance.
- To maintain expert knowledge of Data Protection law and practices and how they apply to the business of the Bank
- To be the first point of contact within the Data Privacy Office for all Data Protection matters
- Support programs of work from inception to ensure that Data Protection is addressed by default and in design of new systems and information processes.
- To monitor compliance with these measures and provide reports to the senior Committees.
- To support programs and initiatives that involve the development of new or innovative information processes on the need for a Data Protection impact assessment (DPIA).
- To support and advise programmes and initiatives in conducting Data Protection impact assessments, and to assure the proposed mitigations.
