Compliance Advisor - Data Privacy

Kotak Mahindra Bank; Mumbai; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Kotak Mahindra Bank seeks a compliance advisor to provide regulatory advisory across major business segments, ensuring adherence to RBI guidelines and privacy laws. The role involves reviewing data processing, third-party arrangements, and internal policies.

Candidates should have CA/MBA/LLB with 4–10 years in compliance, plus experience in second line of defence. Strong stakeholder engagement and practical risk solutions are essential.

Qualifications

• Chartered Accountant / MBA / LLB or equivalent professional qualification.
• 4–10 years of experience in compliance advisory within banking or financial services including data privacy.
• At least 5 years in second line of defence Compliance function of a Bank.

Responsibilities

• Provide compliance advisory across Liabilities, Payments, and Digital Banking products and services.
• Review DPDP Act, 2023 and privacy-related data handling practices.
• Draft/update compliance policies, SOPs, and frameworks; support regulatory reporting and audits.
• Engage with senior stakeholders to mitigate regulatory risks and enable business growth.

Skills

Regulatory compliance

Banking regulations

Data privacy

Stakeholder management

Policy drafting

Education

Chartered Accountant

MBA

LLB

Job description

To provide compliance advisory support across key business segments, ensuring adherence to regulatory requirements and internal policies. The role involves proactive engagement with stakeholders to mitigate compliance risks and enable business growth within the regulatory framework.

Key Responsibilities:

Regulatory Advisory

• Provide compliance advisory support to the following:
• Liabilities Business – including Branch Banking and related products.
• Payments Business – covering UPI, AePS, Payment Aggregators (PA), Payment Gateways (PG), acquiring solutions, and other payment channels.
• Digital Banking – advisory on digital platforms, products, and services
• Government agency business
• Data Privacy aspects
• Interpret circulars, notifications, and regulatory updates and assess their impact on existing products, processes, and policies.

Review and advise on customer consent mechanisms, data collection, processing, sharing, retention, and deletion practices to ensure compliance with the DPDP Act, 2023 and related privacy.

Provide advise on third-party/vendor data processing arrangements, data breaches, data subject rights requests and digital initiatives from a data privacy perspective.

Reviewing Digital Banking Related Products, Policies, Processes and journeys. It involves giving feedback and advice to ensure the bank processes are comprehensive and compliant with regulatory guidelines

• Act as a point of contact for compliance-related queries from internal stakeholders.

Policy & Framework Management

• Assist in drafting, reviewing, and updating compliance policies, SOPs, and internal guidelines in line with regulatory changes.
• Support implementation of compliance frameworks including data Privacy framework, monitoring mechanisms, and control assessments.
• Ensure Compliance policies/SOPs are communicated effectively across departments.
• Conduct compliance risk assessments and identify gaps in adherence.
• Advice on mitigation strategies for regulatory and compliance risks.
• Support responses to regulatory inspections, audits, and supervisory observations.
• Assist in preparation and submission of regulatory reports and disclosures.
• Coordinate with internal audit, risk, and legal teams as required.

Qualifications & Experience

• Chartered Accountant / MBA / LLB or equivalent professional qualification.
• 4 –10 years of experience in compliance advisory within banking or financial services including good experience on data privacy.
• At least, 5 years of work experience in second line of defence Compliance function of a Bank
• Strong understanding of banking regulations, payment systems , data privacy and digital banking frameworks.
• Strong knowledge of RBI guidelines and other regulations.
• Ability to engage with senior stakeholders and provide practical compliance solutions.