Data Privacy Officer

Ness Digital Engineering; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Ness Digital Engineering seeks an experienced Global Data Privacy Officer to lead privacy governance, regulatory compliance, and responsible data-use across the organization. The DPO will build a unified privacy framework and manage privacy risk, partnering with Executive Leadership, Legal, CISO, Technology, Engineering, Delivery, and customers.

The role advances AI governance, privacy-by-design across products and services, and regulatory readiness for global operations, including cross-border

Qualifications

• 12+ years of experience in data privacy, information governance, regulatory compliance, risk, cybersecurity, or related areas.
• Proven experience leading global privacy programs within tech, IT services, digital engineering, software, consulting, or multinational organizations.
• Experience as a Global DPO or senior privacy leader across multiple jurisdictions.
• Strong understanding of the intersection of privacy, cybersecurity, risk, compliance, AI, and business operations.
• Experience working with C-suite, Legal, Security, Technology, Engineering, Sales, and Delivery stakeholders.
• Exposure to M&A, regulatory readiness, enterprise transformation, or AI governance is highly desirable.
• Strong executive presence, commercial orientation, stakeholder management, and ability to translate regulatory requirements into practical business solutions.

Responsibilities

• Define and lead Ness’s global data privacy strategy, governance framework, and operating model.
• Ensure compliance with global regulations including GDPR/UK GDPR, India DPDPA, US privacy laws, PIPEDA, PDPA.
• Lead DPIAs, privacy assessments, audits, regulatory reviews, ROPA, data inventories, and privacy risk management.
• Establish privacy controls and governance across technology, business operations, customer engagements, and third parties.
• Develop and evolve Responsible AI / AI governance frameworks, addressing privacy, regulatory, ethical, and data risks associated with AI/GenAI.
• Support regulatory readiness and operational resilience initiatives, including NIS2, DORA, ISO 22301, BIA, and RTO/RPO.
• Act as privacy SME for M&A, divestitures, and strategic transactions, including privacy due diligence.
• Partner with Sales, Delivery, Legal, and Account teams on customer due diligence, RFPs, audits, DPAs, privacy clauses, ZDR, and contractual requirements.
• Lead third-party privacy risk and international data transfer governance.
• Provide executive-level reporting and advisory on privacy, regulatory, and data risks.

Skills

Global privacy program leadership

Regulatory compliance

Privacy risk management

AI governance

Stakeholder management

Executive communication

Job description

Ness Digital Engineering is looking for an experienced Global Data Privacy Officer (DPO) to lead the organization’s global data privacy, governance, regulatory compliance, and responsible data-use agenda.

The DPO will build and strengthen a unified global privacy framework, manage regulatory and privacy risk, and embed privacy-by-design across business, technology, engineering, delivery, and customer engagements. The role will work closely with Executive Leadership, Legal, CISO, Technology, Engineering, Sales, HR, and customers, including on emerging areas such as AI governance and responsible AI.

Key Responsibilities

• Define and lead Ness’s global data privacy strategy, governance framework, and operating model.
• Ensure compliance with global regulations including GDPR/UK GDPR, India DPDPA, US privacy laws, PIPEDA, PDPA, and other applicable regulations.
• Lead DPIAs, privacy assessments, audits, regulatory reviews, ROPA, data inventories, and privacy risk management.
• Establish privacy controls and governance across technology, business operations, customer engagements, and third parties.
• Develop and evolve Responsible AI / AI governance frameworks, addressing privacy, regulatory, ethical, and data risks associated with AI/GenAI.
• Support regulatory readiness and operational resilience initiatives, including NIS2, DORA, ISO 22301, BIA, and RTO/RPO.
• Act as privacy SME for M&A, divestitures, and strategic transactions, including privacy due diligence.
• Partner with Sales, Delivery, Legal, and Account teams on customer due diligence, RFPs, audits, DPAs, privacy clauses, ZDR, and contractual requirements.
• Lead third-party privacy risk and international data transfer governance.
• Provide executive-level reporting and advisory on privacy, regulatory, and data risks.

Ideal Candidate

• 12+ years of experience in data privacy, information governance, regulatory compliance, risk, cybersecurity, or related areas.
• Proven experience leading global privacy programs within technology, IT services, digital engineering, software, consulting, or multinational organizations.
• Experience as a Global DPO or senior privacy leader across multiple jurisdictions.
• Strong understanding of the intersection of privacy, cybersecurity, risk, compliance, AI, and business operations.
• Experience working with C-suite, Legal, Security, Technology, Engineering, Sales, and Delivery stakeholders.
• Exposure to M&A, regulatory readiness, enterprise transformation, or AI governance is highly desirable.
• Strong executive presence, commercial orientation, stakeholder management, and ability to translate regulatory requirements into practical business solutions.

Preferred Qualifications

• Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or FIP.
• Experience with ISO 27701, ISO 27001, ISO 22301, ISO/IEC 42001, or NIST Privacy Framework.
• Legal background with significant technology/privacy experience is an advantage.
• Experience in Responsible AI / AI governance and emerging technology regulation is a strong plus.