Senior Manager - Data Privacy

Role Summary: Responsible for ensuring organizational compliance with data privacy regulations by assessing risks, advising stakeholders, and strengthening privacy controls across business processes.

We are seeking a resource with strong expertise in contracting and agreement assessments / DPA review, managing customer due diligence and the ability to independently manage the end-to-end third-party due diligence program. The role requires hands on ownership of contract risk assessment, vendor privacy due diligence, and coordination with business, legal, and procurement teams

Key Responsibilities

Strategic Leadership: Develop and execute a global privacy roadmap that aligns with organizational growth and expansion into new markets.

• Monitor and interpret global privacy laws; ensure compliance alignment
• Collaborate with business, risk, compliance, and technology stakeholders
• Conduct impact assessments across business and technology processes
• Perform gap analysis between Local Addendums and Industry Standards
• Prepare stakeholder updates, documentation, and implementation reports

Regulatory Guardrail: Act as the subject matter expert on global privacy laws including GDPR, DPDPA, as well as emerging regulatory guidelines.

• Analyse local laws/regulations that have been recently rolled out
• Perform privacy audits, compliance testing, and gap analysis
• Design and execute implementation approaches for identified remediation activities
• Drive process improvements and implementation tracking

Commercial Support & Negotiations: Partner with Sales and Legal to negotiate complex. Data Processing Addendums (DPAs) and BharatPe privacy program during high-stakes client audits and RFPs.

• Review Data Processing Agreements and assess privacy risks
• Conduct vendor due diligence and third-party risk assessments

Privacy by Design: Embed privacy requirements into the lifecycle of new product

• development and client onboarding processes.
• Conduct Data Privacy Impact Assessments (DPIAs) and privacy risk assessments
• Advise teams on privacy requirements for new projects, systems, and process changes

Incident Management: Lead the Privacy Incident Response Team, ensuring swift,

• compliant, and transparent handling of any potential data breaches.

Audit & Compliance: Oversee Data Protection Impact Assessments (DPIAs) and manage third-party privacy audits (e.g., SOC2, ISO 27001, ISO 27701) in collaboration with various functions

• Support governance, control enhancement, and regulatory compliance initiatives

Advocacy & Training: Foster a culture of privacy awareness across our global frontline, ensuring our "People-First" mission extends to how we protect individual data rights.

People Leadership & Development: Work with a multidisciplinary team to drive privacy agenda across the organization.

Qualifications

• Experience: 10+ years of experience in data privacy, legal, or compliance, with at least 5 years in a global leadership role-ideally within the BFSI, Fintech, SaaS, or Tech sectors - directly managing and developing diverse teams of privacy professionals across multiple jurisdictions.
• Education: JD or equivalent advanced degree preferred; Bachelor's degree in Law, IT, or Business required.

Business Skills

• Strong experience in gap analysis, impact assessments, and implementation delivery
• Ability to interpret and operationalise regulatory and policy standards
• Strong stakeholder management and consulting skills

Certifications: CIPP/E, CIPP/US, and CIPM (IAPP) certifications are highly preferred.

Technical Fluency:

• Deep understanding of how data flows in applications, infrastructure and AI/ML pipelines.
• Data Privacy domain expertise
• Experience working on regulatory transformation initiatives
• Exposure to governance and controls frameworks
• Experience with privacy compliance tools, frameworks, or GRC platforms
• Excellent analytical, communication, and documentation skills