Internal Job Posting – Data Privacy Office

Levels which can apply

REPORTING POSITION

Data Protection Officer (DPO)

Job Responsibility

· Core Responsibilities:

§ Policy Development: Draft, update and manage data privacy policies and processes in alignment with DPDP regulations and other applicable laws.

§ Risk Assessments: Review Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new projects and software.

§ Incident Management: Create data incident management processes and response plans, investigate data breaches, liaison with stakeholders to ensure the response plan is being followed.

§ Subject Rights: Establish processes that will ensure all requests related to the right to access, rectify, or erase personal data (often called "Right to be Forgotten") will be handled as per the regulatory requirements.

§ Training & Awareness: Educate employees on privacy principles and security-conscious data handling.

§ Compliance Monitoring: Conduct regular self-assessments for compliance to DPDP requirements.

§ Governance and reporting: Prepare management reporting data points for regular updates on privacy office, regulatory updates, privacy compliance etc.

Job Specification

Educational Qualifications:

Graduate / Post-Graduate in Information Security, Computer Science, IT, Law or Privacy domain

Experience: 3-6 years

· Understanding of data protection laws and practices with experience in related disciplines such as information governance, incident response, risk management, etc.

· Shall have knowledge of company’s business sector, data processing needs, information technologies and data security.

· Shall have the ability to promote data protection culture within the company.

· Strong project management skills.

· Ability to work effectively under pressure and to manage sensitive and confidential information

· Excellent verbal and written communication skills, with strong attention to detail