Deputy Vice President - Vision plus DPDP Program

Role Accountability

This role is accountable for the overall DPDP compliance posture of SBI Card’s core platforms and the outcomes of related initiatives. Key accountabilities includes:

1. DPDP Compliance Implementation:

• Interpret and apply RBI’s DPDP Act requirements across core systems. Enforce necessary controls on VisionPLUS, UPI Switch, and ACS – including implementing explicit consent capture mechanisms, data minimization rules, proper data retention schedules, and encryption of sensitive data at rest and in transit.
• Work with IT development teams to embed these controls into system enhancements and new projects from the design phase onward, ensuring privacy-by-design for all platform changes.

2. Governance & Monitoring:

• Establish and maintain DPDP compliance policies, standards, and audit routines for the core platforms. Continuously monitor platform-level compliance through regular audits, system checks, and data privacy assessments.
• Provide regular compliance reports to senior management on DPDP status, highlighting compliance levels, incidents, and remediation actions.
• Promptly investigate and close any compliance gaps or data protection weaknesses identified, to ensure full adherence to RBI directives at all times.

3. Cross-Functional Coordination:

• Collaborate closely with multiple stakeholder teams to enforce data protection standards. Work with IT Development teams to integrate DPDP requirements into system upgrades and new feature designs; partner with Information Security (InfoSec) to align on security controls and incident response; coordinate with Legal & Compliance departments to interpret regulatory guidelines and ensure our controls meet legal requirements; and engage with Operations teams to adjust workflows for compliance (e.g. data deletion, consent management processes).
• Develop and deliver training sessions and DPDP awareness programs for core platform teams, ensuring all relevant employees and vendors understand proper data handling and privacy practices.

4. Stakeholder Liaison

• Act as the single point of contact for all DPDP compliance matters related to VisionPLUS, UPI Switch, and ACS. Provide timely updates to senior leadership on compliance status, significant risks, and project progress in implementing DPDP controls.
• Prepare materials and responses for any regulatory inquiries or audits on data protection, ensuring that regulators’ questions are addressed accurately and promptly.
• Liaise with the VisionPLUS platform vendor (Fiserv) and other third-party providers to communicate our data protection requirements and obtain their adherence, thus overseeing vendor alignment with DPDP obligations and addressing any vendor-related compliance issues.

5. Project management:

• Holds regular status meetings with project team.
• Keeps project team well informed of changes within the organization
• the candidate would need to display inclusiveness to lead as well as take the team along the life of the Program
• Effectively communicates relevant project information to superiors
• Resolves and/or escalates issues in a timely fashion

Measures of Success

1. Regulatory Compliance Rate:100% compliance with all DPDP Act requirements on VisionPLUS, UPI Switch, and ACS. Zero penalties or regulatory citations related to data privacy. All RBI audits or inspections conclude with satisfactory compliance ratings.
2. Closure of Compliance Gaps: All identified DPDP compliance gaps or audit findings are addressed within agreed timelines.
3. Compliance Reporting & Monitoring: Timely submission of regular compliance reports (e.g., monthly/quarterly) to management, with clear metrics on consent capture rates, data retention compliance, etc. A high quality of reporting (accurate and actionable data) and positive feedback from senior management on visibility into DPDP status.
4. Vendor DPDP Alignment: Demonstrated vendor compliance with DPDP obligations – e.g., quarterly compliance certificates or audit reports from the VisionPLUS vendor confirming adherence to data protection controls.

Technical Skills / Experience / Certifications

1. Data Privacy & DPDP Act Expertise : Certifications or training in data privacy (for example, ISO 27701, CIPP, or relevant RBI mandated certifications) would be beneficial.
2. Subject Matter expert on credit card Domain
3. VisionPLUS Platform Expertise
4. UPI Switch & ACS Knowledge
5. Security Controls & Encryption
6. Audit & Compliance Monitoring
7. Vendor Management & SaaS Governance
8. Cross-Functional Project Management
9. Strong analytical skills

Competencies critical to the role

Stake holder Management, Vendor management and pricing review

Qualification

B.E/ B.Tech / MCA