Data Privacy Manager

Protiviti India; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Protiviti India is seeking a privacy professional to develop and implement a comprehensive privacy framework aligned with GDPR, IDPR, CCPA and other regulations. The role covers DPIA/PIA, policy creation, data lifecycle mapping and data classification.

You will assess systems, vendors and cloud services for compliance and contribute to incident response and training programs. You will collaborate with business teams to understand data flows, implement DLP controls and ensure ongoing privacy

Responsibilities

• Create privacy framework based on compliance requirements (GDPR, IDPR, CCPA, ADHICS, etc.)
• Map regulatory requirements for data controller and data processor roles
• Conduct Privacy Impact Assessments (PIA) and Data Privacy Impact Assessments (DPIA)
• Create and update security and privacy policies, procedures, notices and best practices
• Assess applications, vendors, infrastructure, cloud services and processes for privacy compliance
• Provide remediation recommendations including technical solutions for identified gaps
• Support privacy incident management and assist in mitigation planning and closure
• Prepare training materials and deliver training on data privacy handling and destruction
• Develop data classification guidelines and data classification policies
• Understand business data lifecycle and create data flow maps
• Implement data leakage prevention tools based on requirements
• Provide assurance on Data Loss Prevention and monitoring tools and investigations
• Assist in inventorying sensitive information stored/processed/transmitted to various audiences

Job description

Roles and responsibilities:

• To create privacy framework based on compliance requirements like GDPR, IDPR, CCPA, ADHICS, CCPA, etc.
• To map regulatory requirements as per the requirements of data controller and “data processor”
• To conduct Privacy Impact Assessment (PIA) and Data Privacy Impact Assessment (DPIA)
• To create and update security & privacy policies, procedures, good practices and notices.
• To assess applications, vendors, infrastructure, cloud services and processes for compliance as per security and privacy requirement
• To provide remediation recommendations including technical solutions regarding the gaps identified
• To provide support for privacy related incident management process, recommendations to incidents, to help in preparation of mitigation plan and to provide support in closing the incident.
• To prepare training material and provide training about maintaining required data privacy standards while collecting, storing, processing and destruction of data.
• To help with the development of data classification guidelines
• To create policies for data classification and classify data as per the data classification guidelines.
• To understand the business, to analyze the data life cycle and accordingly create data flow maps.
• To implement data leakage prevention tool based on defined business, security and regulatory requirements.
• To provide assurance regarding Data Loss Prevention and other monitoring tools, efforts and related investigations and remediation actions
• To assist in the process of identification and creation of inventory of sensitive information that is being stored, processed, or transmitted internally and to a variety of audiences, including customers, vendors, employees, etc.