Data Protection Officer

<ul>
<li>Guarantee organizational adherence to relevant data protection laws and regulations.</li>
<li>Monitor changes in privacy laws and promptly update policies and procedures to align with the evolving legal landscape.</li>
<li>Prepare and regularly review Data Privacy policies and procedures to ensure compliance with legal, regulatory, and organizational updates.</li>
<li>Assist in the development and implementation of the Data Privacy strategy, integrating it into the broader Information Security strategy of the organization.</li>
<li>Conduct privacy impact assessments for new projects, processes, or technologies involving personal data.</li>
<li>Identify and document the types of personal data processed, establish the purposes of processing, and classify data based on sensitivity. Implement appropriate protection measures accordingly.</li>
<li>Manage and respond to data subject access requests and inquiries related to privacy concerns.</li>
<li>Provide training to employees on data protection practices and foster privacy awareness within the organization.</li>
<li>Collaborate with other departments to ensure a holistic approach to data protection, fostering a culture of compliance throughout the organization.</li>
<li>Support reporting authorities in implementing procedural control measures identified through audits, risk assessments, compliance reviews, etc.</li>
<li>As the go-to person for data protection, the DPO ensures that data management policies align with security and compliance requirements.</li>
<li>Oversee the development, implementation, and enforcement of information/data classification policies, ensuring comprehensive coverage in SOP/Baseline documents.</li>
<li>Perform internal privacy audits and assessments to identify gaps and areas for improvement. Recommend and implement corrective actions as needed.</li>
<li>Work with Procurement and Third-Party Risk Management teams to ensure adequacy of assessment, evaluation, and monitoring of third-party vendors that handling personal data, in terms of their data handling practices, security and contracts, to ensure they comply with privacy and data protection requirements.</li>
<li>Undertake any other related duty assigned by the HOD Information Security.</li>
</ul><h2>Requirements</h2><ul>
<li>Knowledge and understanding of common data protection management frameworks &amp; best practices.</li>
<li>Ability to assess privacy impact, classify data, and establish protective measures based on sensitivity.</li>
<li>Comprehensive understanding of Data Privacy strategy and its alignment with broader Information Security goals.</li>
<li>Strong analytical, communication, collaboration, problem-solving, documentation and leadership Skills to convey complex data protection concepts to diverse audiences, both internal and external.</li>
<li>Bachelor’s degree in a technology/engineering/information security related field required.</li>
<li>Minimum 6 to 7 years of hands-on experience in Data &amp; information security in a large enterprise environment.</li>
</ul><h2>Benefits</h2><ul>
<li>Competitive salary</li>
<li>Fuel Card</li>
<li>Health benefits</li>
<li>Professional development opportunities</li>
<li>Inclusive work culture &amp; much more</li>
</ul>