Data Privacy Executive (0-2 Years)

Gostravvy; Ahmedabad District; In loco; INR 900.000 - 1.500.000; Tempo pieno

Descrizione del lavoro

Gostravvy is seeking a proactive Privacy Executive to support data protection and privacy compliance in a fast-paced fintech environment. You will safeguard financial and personal data, ensure compliance with DPDP Act (India), RBI guidelines, and global privacy standards to enable secure product and business operations.

Key tasks include data mapping, RoPA maintenance, DPIAs, vendor privacy reviews, incident handling, and promoting a strong privacy culture across teams.

Competenze

• Mandatory skills in data privacy, privacy law, data structures, data analytics, and records management.

Mansioni

• Support privacy compliance programs aligned with DPDP Act (India), RBI guidelines, and global standards (GDPR, ISO 27701).
• Map data flows and maintain RoPA for financial products and customer data.
• Embed privacy by design with product/tech teams; review features, APIs, and partnerships for privacy.
• Assist DPIAs for new fintech products and vendor onboarding; identify privacy risks.
• Coordinate data subject rights and grievance handling within regulatory timelines.
• Assist in incident/breach management and regulatory reporting (RBI, CERT-In).
• Support third-party risk reviews; negotiate data protection clauses in NDAs/DPAs.

Conoscenze

Data Privacy

Privacy Law

Data Structures

Data Analytics

Records Management

Formazione

LLB/LLM + CIPM/CIPPE + ISO 27701 LI, ISO 27001 LI

Descrizione del lavoro

Job Summary:

We are seeking a proactive Privacy Executive to support our data protection and privacy

compliance program in a fast-paced fintech environment. The role will focus on safeguarding

financial and personal data, ensuring compliance with laws such as the DPDP Act (India), RBI

guidelines, and global privacy frameworks, and enabling secure product and business

operations.

Job Summary:

We are seeking a proactive Privacy Executive to support our data protection and privacy

compliance program in a fast-paced fintech environment. The role will focus on safeguarding

financial and personal data, ensuring compliance with laws such as the DPDP Act (India), RBI

guidelines, and global privacy frameworks, and enabling secure product and business

operations.

Key Responsibilities:

1. Regulatory & Privacy Compliance

• Assist in implementation and monitoring of privacy compliance programs aligned with DPDP

Act, RBI IT & outsourcing guidelines, and global standards (GDPR, ISO 27701).

• Maintain and update privacy policies, consent frameworks, and customer-facing notices for

digital platforms (apps/web).

2. Data Mapping & Governance

• Support creation and maintenance of data flow maps for financial products
• Create & Maintain Records of Processing Activities (RoPA) specific to customer financial and

transactional data.

3. Product & Business Support

• Work with product and tech teams to embed privacy by design in fintech solutions.
• Review new features, APIs, integrations, and partnerships for privacy

4. DPIAs & Risk Assessments

• Assist in conducting Data Protection Impact Assessments (DPIAs) for new fintech products

and vendor onboarding.

• Identify privacy risks in various products & process including analytics use cases.

5. Customer Data Rights & Grievance Handling

• Assist & manage data principal (may be through automated tools)
• Coordinate with internal teams to resolve privacy complaints within regulatory timelines.

6. Incident & Breach Management

• Support investigation and documentation of data breaches
• Assist in regulatory reporting (RBI, CERT-In where applicable).

7. Third-Party Risk Management

• Support privacy review of vendors, & other associated partners
• Review and negotiate data protection clauses in agreements (NDAs, DPAs, outsourcing

contracts).

8. Training & Awareness

• Conduct awareness sessions for employees on customer data protection, phishing risks, and

financial data confidentiality.

• Assist in promotion of a strong data privacy culture across business units.

9. Documentation & Reporting

• Maintain dashboards, compliance trackers, audit logs, and privacy documentation.
• Support internal/external audits and regulatory inspections.
• Support in the Implementation of ISO 22301, 27701 & 42001 in the Company.

Qualification:

LLB/LLM + CIPM/CIPPE + ISO 27701 LI, ISO 27001 LI

Mandatory Skills:

Data Privacy | Privacy Law | Data Privacy Law | Data Structures | Data Analytics | Records

Management