Data Privacy Officer

Bean Hr Consulting; Gurugram District; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Bean Hr Consulting is seeking an experienced Data Privacy professional to lead compliance efforts. You will manage DPIAs, monitor adherence to privacy laws, and coordinate with internal teams and external auditors.

The role demands strong policy drafting, training delivery, and risk-based decision making to protect sensitive information across the organization.

Qualifications

• At least 5 years working with privacy laws, including drafting privacy policies and technology provisions.
• Experience with compliance programs, audits, and risk assessment.
• Experience conducting privacy training and awareness sessions.

Responsibilities

• Manage and monitor compliance with data privacy laws and standards (DPDPA, GDPR, etc.).
• Perform DPIAs and regular compliance assessments with reporting.
• Collaborate with business, IT, vendors, and auditors to ensure law adherence.
• Provide periodic security awareness training for employees/contractors.
• Develop KPIs and metrics for privacy program effectiveness.
• Plan, schedule and analyze internal/external data protection activities.
• Lead privacy-related audits and remediation actions with closure tracking.
• Oversee process documentation and policy adherence.

Skills

Privacy policy drafting

Regulatory compliance

Stakeholder management

Security awareness training

Audit & risk assessment

Data protection knowledge

Education

Bachelor's degree or higher in Law/IT/CS/Engineering

Privacy certifications (CIPP/E, CIPM, CDPSE, CISSP, etc.)

Tools

CIPP/E

CDPSE

CIPM

DSCI CPP

CISSP

DSCI DCDPO

Job description

ONLY FOR CANDIDATES WORKING WITH INDIAN BANKS OR INSURANCE DOMAIN

Responsibilities

• Manage and monitors compliance with all applicable Data privacy laws, regulations and standards including DPDPA, GDPR etc.
• Perform regular compliance assessments and reporting, i.e. Data Privacy Impact Assessment (DPIA)
• Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable Data protection law, regulations and standards
• Provide periodic and adhoc security awareness training for employees/contractors to increase Data Protection awareness pertaining to their job functions and evaluate training effectiveness
• Recommend and develops KPIs and metrics to evaluate the Data protection / Privacy program and related controls.
• Participate in planning, scheduling and preliminary analysis for all internal and external Data
• Protection / Privacy audits and assessments and maintain list of outstanding audit actions and works with the remediation team to remediate identified gaps
• Oversee process documentation and compliance adherence

Measures of Success:

• Timely implementation of data privacy programs at org level
• Completion of privacy impact assessments as per schedule
• Timely reporting of data privacy incident both internally and to the regulator as per the mandate
• Timely updation and board approval for data privacy policy
• No adverse observations in internal/external audits
• Timely completion of data privacy trainings for all eligible users
• Timely remediation of any findings or recommendations made by any of the internal or external assessors as part of privacy impact
• Adherence to data privacy policy within the organization

Qualifications:

• 10-12 years of post qualification experience.
• Relevant Experience with respect to the role: At least 05 years of experience in working with privacy laws, including drafting of privacy policies, technology provisions, and working on compliance.
• One or more certifications related to Privacy, i.e., Certified Information Privacy Professional (CIPP/E), Certified Data Privacy Solutions Engineer (CDPSE),Certified Information Privacy Manager (CIPM), DSCI Certified Privacy Professional, CISSP, DSCI Certified Data Protection Officer (DCDPO) or any other equivalent certification
• Experience in technical training and in conducting awareness sessions
• Experience in dealing successfully with different business and external stakeholders
• Experience working with IT programming or infrastructure, including certification in information security standards
• Experience in performing audits of information systems, attestation audits and risk assessments
• Knowledge on how to assess, develop and implement Data Privacy program including drafting of privacy policies, standards, processes, procedures and technology provisions etc.