Data Protection Officer

Jobtailor; Andheri; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Jobtailor is seeking a senior data protection professional to own, maintain and improve the privacy compliance framework across global processing sites. You will drive lawful processing, partner with IT, Operations, Engineering, HR and Procurement to embed practical privacy controls and ensure ongoing governance including DPIAs and RO ROPA management.

You will review DPAs, oversee international transfers, monitor legal changes across UK, EU, India, Philippines, US and Canada, and deliver privacy

Qualifications

• 5+ years in data protection, privacy compliance or information governance with hands-on responsibility for operational privacy activities.
• Proven experience reviewing and negotiating client and supplier DPAs and advising on practical contractual privacy requirements.
• Strong experience producing DPIAs, maintaining ROPAs and supporting data subject rights, retention and international transfer compliance.
• Working knowledge of UK GDPR, EU GDPR and broader international privacy requirements across the UK, EU, India, Philippines, US and Canada.
• Professional certification such as CIPP/E, CIPM, EU GDPR Practitioner or equivalent privacy qualification desirable.
• Able to translate privacy risk into business impact and influence stakeholders at all levels.

Responsibilities

• Own, maintain and improve the data protection and privacy compliance framework across multiple processing sites.
• Proactively manage and improve the data protection compliance framework, driving privacy accountability and lawful processing.
• Partner with IT, Operations, Engineering, HR, Procurement to embed practical data protection controls.
• Own and maintain the data protection governance framework including policies and procedures.
• Maintain and manage the Record of Processing Activities (ROPA) documentation.
• Lead DPIAs, LIAs, EU SCCs and other privacy risk assessments for new processing activities.
• Review and advise on DPAs, privacy clauses and international data transfer provisions.
• Monitor compliance and drive remediation actions for privacy legislation.
• Provide guidance on lawful bases, data subject rights, retention and privacy by design.
• Support management of personal data breaches and incident response.
• Assess third-party privacy risk with suppliers and due diligence.
• Develop and deliver data protection training and respond to privacy questionnaires.
• Define and report privacy KPIs, incidents and risks to senior leadership.

Skills

Data protection

Privacy compliance

Information governance

Contractual privacy (DPAs)

Data governance

Privacy training

Cross-border transfers

Job description

Responsibilities

• Own, maintain and improve the data protection and privacy compliance framework, ensuring lawful, fair and transparent processing of personal data across processing sites in the UK, EU, India, Philippines, US and Canada.
• Proactively manage and improve the data protection compliance framework, driving privacy accountability and lawful processing across the organisation.
• Partner with IT, Operations, Engineering, HR, Procurement and business stakeholders to embed practical data protection controls and support compliant growth.
• Own and maintain the data protection governance framework, including policies, standards, procedures and supporting documentation.
• Maintain and manage the Record of Processing Activities (ROPA), ensuring processing activities, data flows, systems, suppliers and international transfers are accurately documented and kept up to date.
• Lead and produce Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), EU Standard Contract Clauses (SCC) and other privacy risk assessments for new and changed processing activities and transfers.
• Review, negotiate and advise on client and supplier data processing agreements (DPAs), privacy clauses and international data transfer provisions.
• Monitor compliance with applicable privacy and data protection legislation across the processing sites, escalating gaps and driving remediation actions.
• Provide practical guidance on lawful bases for processing, data subject rights, retention, minimisation, privacy by design and cross-border transfers.
• Support management of personal data breaches, including triage, risk assessment, notification decision-making, client communications and post-incident review.
• Work with supplier owners and procurement teams to assess third‑party privacy risk and ensure appropriate due diligence and contractual controls are in place.
• Develop and deliver data protection training and awareness to employees and support responses to client privacy questionnaires, audits and compliance requests.
• Define and report privacy KPIs, incidents, risks, audit findings and action plans to senior leadership, while working with IT, Operations, Engineering and wider business units to identify risks and scale good practice.

Qualifications

• 5+ years in data protection, privacy compliance or information governance with hands‑on responsibility for operational privacy activities.
• Proven experience reviewing and negotiating client and supplier DPAs and advising on practical contractual privacy requirements.
• Strong experience producing DPIAs, maintaining ROPAs and supporting data subject rights, retention and international transfer compliance.
• Working knowledge of UK GDPR, EU GDPR and broader international privacy requirements across the UK, EU, India, Philippines, US and Canada.
• Professional certification such as CIPP/E, CIPM, EU GDPR Practitioner or equivalent privacy qualification desirable.
• Able to translate privacy risk into business impact and influence stakeholders at all levels.