Data Protection and Cybersecurity Manager
Cognita Asia Holdings Pte Ltd
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
CHIREC International School in Hyderabad seeks a Data Protection and Cybersecurity Manager to lead data protection, privacy, and cybersecurity initiatives. You will coordinate DPDPA compliance, risk management, and governance across business and IT teams, embedding privacy by design into processes and vendor engagements.
The role collaborates with IT on security operations, risk assessments, and incident response, advancing the organization's data protection maturity while supporting everyday
Qualifications
- 5–8 years of relevant experience in cybersecurity or data protection/privacy.
- Bachelor's degree in CS/IT/Cybersecurity or related field.
- Knowledge of data privacy principles and applicable regulations (DPDPA).
- Experience with data protection, cybersecurity, IT operations, and risk/compliance.
Responsibilities
- Coordinate organization-wide data protection and privacy implementation.
- Support DPDPA compliance and privacy policy management.
- Embed data protection into processes and vendor engagements.
- Monitor cybersecurity policies, controls and risk remediation.
- Coordinate with IT on security operations and incident response.
Skills
Education
Job description
CHIREC International is a leading K-12 school located in Hyderabad,India offering International Baccalaureate Diploma Programme (IBDP), CambridgeInternational Examinations (CIE) and Central Board of Secondary Education(CBSE). CHIREC was founded in 1989 by Founder-Director, Ratna Reddy as a summercamp that offered programmes in fine arts, performing arts, computers, indoorand outdoor sports. Today, CHIREC is one of the premier educational institutionsin the country for excellence in academics and co-curricular activities.CHIREC’s mission is to nurture the innate potential of its students to enablethem to excel in whatever they choose. The school helps students to grow andevolve into open-minded, ethical and caring individuals who are focused andencouraged to set goals, attain them and exceed expectations. As a valuedmember of the Cognita global group, and recognized by respected educationalbodies like the Council of International Schools (CIS) and the IB Organization,CHIREC International School is known for its exceptional quality ofeducation.
At Cognita, we know every student is unique. We nurture their distinctpersonalities and strengths. We support them academically, socially, andemotionally, wherever they are in the world, wherever they’re starting from.And each and every one of our schools is unique too. We protect what’s special about them, while offering them rich knowledge,opportunities, and best practices. And they get to be part of something bigger. We open their classrooms to the collective wisdom of over 100 schools in 16countries, ensuring every child gets an education that’s, quite literally,world class. It’s an individual approach that empowers every school, teacher and student tofocus on what they do best. And thrive.
The Data Protection andCybersecurity Manager will initially focus on coordinating and driving theorganization's data protection & privacy implementation, includingimplementation of the DPDPA and related requirements. The role will workclosely with business and IT teams to establish and embed appropriate dataprotection practices, governance, documentation, and controls. As part of the role, theposition will also work closely with the IT team on cybersecurity, technologyrisk, security controls, and day-to-day IT operational matters, with the scopeexpected to evolve as the organization's data protection and cybersecuritycapabilities mature. The position coordinates organization-wideimplementation of the DPDPA, applicable privacy requirements, and relevantcybersecurity standards and practices. Working with stakeholders acrossdepartments, the role ensures that data protection, privacy and securityrequirements are embedded into business processes, technology initiatives,vendor relationships, and day-to-day operations.
The role identifies gaps,coordinates corrective actions, monitors implementation, and provides practicalguidance to business and technology teams. Final legal interpretations,executive-level policy ownership, and acceptance of significant risks remainwith the appropriate senior management, Legal/Compliance, or designated privacyleadership. The scope of IT involvement will evolve based on organizationalpriorities and requirements.
- Act as the central point of coordination fororganization-wide data protection & privacy implementation.
- Coordinate compliance with the DPDPA and otherapplicable data protection and privacy requirements.
- Maintain and support implementation of data protection& privacy policies, procedures, standards, and guidelines.
- Work with business and functional teams to embed dataprotection requirements into processes, technology initiatives, andthird-party engagements.
- Coordinate data mapping, data inventories, andprivacy/data protection impact assessments, where applicable.
- Review data handling practices, identify compliancegaps, and coordinate remediation.
- Support management of data protection risks, privacyincidents, and personal data breaches in coordination with relevantstakeholders.
- Maintain required data protection & privacy recordsand documentation and provide periodic compliance updates to management.
- Support data protection & privacy awareness andtraining initiatives and provide day-to-day guidance to stakeholders.
- Maintain and support the implementation of cybersecuritypolicies.
- Support the implementation of cybersecurity standardsand procedures.
- Monitor compliance with established security controls.
- Conduct periodic security governance reviews and trackcorrective actions.
- Prepare and report the organization's cybersecurityposture and key risks to management.
- Coordinate with IT and relevant stakeholders oncybersecurity risk remediation.
- Monitor cybersecurity incidents, alerts, and securitymonitoring reports.
- Coordinate incident response and remediation activitieswith IT and relevant stakeholders.
- Monitor key endpoint, network, and cloud securitycontrols.
- Coordinate vulnerability identification and timelyremediation.
- Support periodic security assessments and testing.
- Support cybersecurity and data protection & privacyrisk assessments.
- Maintain the cybersecurity and data risk register.
- Monitor emerging cybersecurity threats and risks.
- Track risk mitigation and remediation activities.
- Report significant cybersecurity risks and outstandingactions to management.
- Review privileged and critical user accounts.
- Monitor user access governance and periodic accessreviews.
- Coordinate access certification exercises.
- Support least-privilege and segregation-of-dutiesrequirements.
- Review critical access requests in accordance withestablished policies.
- Support assessment of vendor cybersecurity and dataprotection & privacy controls.
- Review security and data protection & privacy requirementsin vendor arrangements.
- Coordinate third-party cybersecurity and data protection & privacy risk assessments.
- Monitor remediation of identified vendor security risks.
- Coordinate with Procurement, Legal, IT, and relevantbusiness teams on third-party security matters.
- Work closely with the IT team on day-to-day IToperations, technology risks, and improvement initiatives.
- Coordinate with IT on security, privacy, access,infrastructure, and other technology controls.
- Participate in IT projects, system changes, incidentmanagement, and remediation activities.
- Support continuous improvement of IT processes,controls, documentation, and operational practices.
- Bachelor's degree in Computer Science, InformationTechnology, Cybersecurity, Information Security, or a related discipline.
- 5-8 years of relevant experience in cybersecurity,information security, data protection & privacy, IT risk, compliance,or a related field.
- Practical experience in data protection & privacy,cybersecurity, IT operations, security governance, risk management,compliance, or related areas, with the ability to work across bothgovernance and operational environments.
- Working knowledge of data privacy principles andapplicable regulations, including the DPDPA.
- Experience with security controls, vulnerabilitymanagement, access management, incident response, and third-party risk.
- Good understanding of IT infrastructure, network,endpoint, cloud, identity, application security, and general IToperations.
- Relevant certifications such as ISO 27001 or equivalentcybersecurity/privacy certifications are preferred.
- Competitive salary depending upon qualifications and experience
- Lunch on all school-working days
- School transport as per the available bus routes
- Comprehensive Medical Insurance
- Personal accident policy
- Term Life policy
- Professional Development
Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expect all staff, volunteers and other third-parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.
We believe having a diverse workforce makes us better, smarter and happier and so welcome applicants from all backgrounds, genders, and races.
We have an unwavering commitment to being fair and equitable in our recruitment process.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
