Data Governance Manager

Meta Infotech; Thane; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Meta Infotech seeks an experienced DataProtection Governance leader to own the design, build-out, and enterprise-wide operationalisation of a DP governance framework aligned to DPDP Act 2023, GDPR, ISO/IEC 27701, and sectoral regs. Reporting to Technical Director, you will drive buy-in across Business, IT, Security and Compliance and embed auditable privacy practices organization-wide.

You will design the TOM, establish RACI, maps, DPIA/PIA methodologies, and KPI dashboards, ensuring audit

Qualifications

• Bachelor's or Master's degree in Law, Business, IT, or related field.
• 10–15 years in data privacy, InfoSec governance, or risk & compliance with 3–5 years in leadership.
• Certifications preferred: CIPP/E, CIPM, DCPP/DPO, ISO 27701 LI, CISA/CISM/CRISC.
• Regulated-industry experience (BFSI, healthcare, IT/ITES) preferred.

Responsibilities

• Design and develop the enterprise-wide Data Protection Governance framework and target operating model (TOM).
• Define and establish clear roles and responsibilities, including a detailed RACI matrix.
• Cascade roles, responsibilities, and RACI matrices across Business, IT, Security, and Compliance.
• Draft and maintain data protection policies, SOPs, and playbooks (consent, data subject rights, breach notification, retention).
• Oversee personal data inventories, data flow mapping, and RoPA (Records of Processing Activities).
• Establish DPIA/PIA methodology and embed privacy-by-design into project lifecycles.

Skills

Data privacy

InfoSec governance

Risk & compliance

Leadership

Regulatory expertise

Education

Bachelor's/Master's in Law, Business, IT, or related field

Tools

CIPP/E

CIPM

DCPP/DPO

ISO 27701 LI

CISA/CISM/CRISC

Job description

Role Summary

Own the design, build-out, and enterprise-wide operationalisation of a Data Protection Governance Framework target operating model, policies, RACI, and controls aligned to DPDP Act 2023, GDPR, ISO/IEC 27701, and applicable sectoral regulations. Reporting to the Technical Director, the incumbent drives buy-in across Business, IT, Security, and Compliance leadership and embeds accountable, auditable data protection practices organisation-wide.

Key Responsibilities

• Design and develop the enterprise-wide Data Protection Governance framework and target operating model (TOM), aligned to regulatory and business requirements.
• Define and establish clear roles and responsibilities, including a detailed RACI matrix, aligned to regulatory and business requirements.
• Cascade roles, responsibilities, and RACI matrices across Business, IT, Security, and Compliance, closing ownership gaps on personal data processing.
• Draft and maintain data protection policies, SOPs, and playbooks (consent, data subject rights, breach notification, retention).
• Oversee personal data inventories, data flow mapping, and Records of Processing Activities (RoPA).
• Establish DPIA/PIA methodology and embed privacy-by-design into project lifecycles.
• Set up governance forums, reporting cadences, and KPI dashboards to track framework effectiveness.
• Drive regulatory/audit readiness, third-party data governance, training, and breach/incident response.

Core Domain

• DPDP Act 2023 & GDPR
• Governance operating model design
• RACI matrix development
• Data mapping / RoPA
• DPIA / PIA methodology
• ISO/IEC 27701 & ISO 27001
• Sectoral regs (RBI/SEBI/IRDAI)
• Breach & incident mgmt

Qualifications

• Bachelor's/Master's in Law, Business, IT, or related field
• 10–15 years in data privacy, InfoSec governance, or risk & compliance, incl. 3–5 years in a leadership capacity
• Certifications preferred: CIPP/E, CIPM, DCPP/DPO, ISO 27701 LI, CISA/CISM/CRISC
• Regulated-industry experience (BFSI, healthcare, IT/ITES) preferred