Data Protection Officer (DPO)

Esds Software Solutions; Nashik District; Presencial; INR 1 800 000 - 3 000 000; Tempo integral

Resumo da oferta

ESDS Software Solution Limited seeks an experienced Data Protection Officer to lead enterprise-wide privacy governance and ensure DPDP, GDPR, and UK GDPR compliance. You will advise management, monitor frameworks, manage privacy risks, and drive privacy by design across business and tech functions.

You will coordinate with Legal, IS, IT, HR, and Procurement, handling DPIAs, data subject requests, and breach response while promoting a privacy-aware culture.

Qualificações

• Bachelor’s degree in a related discipline such as law, IT, CS, or business administration.
• Master’s degree or specialised privacy governance qualification preferred.
• Certifications in privacy (e.g., CIPP/E, CIPM, CIPT) or ISO 27701 are desirable.

Responsabilidades

• Monitor DPDP Act, GDPR, UK GDPR compliance across the enterprise.
• Develop and maintain privacy policies, notices, procedures, and governance.
• Advise on DPIAs, privacy risk assessments, and privacy by design.
• Oversee data subject rights requests and regulatory correspondence.
• Support breach assessment, reporting, investigation, remediation, and docs.
• Review vendor data processing agreements and privacy risk assessments.
• Advise on cross-border transfers and safeguards.
• Coordinate with Legal, Information Security, IT, HR, Procurement.
• Drive privacy training, audits, and compliance reporting.
• Prepare dashboards and reports for senior management/Board.
• Monitor regulatory developments and update controls.

Conhecimentos

Data Protection & Privacy Compliance

DPDP Act 2023

GDPR & UK GDPR

DPIA & Privacy Risk

Privacy Governance & Risk

RoPA & Data Mapping

Breach Management & Incident

Vendor Risk & Third-Party DP

Cross-Border Data Transfers

Privacy Policy Drafting

Audit & Compliance Reporting

Formação académica

Bachelor's in Law / IT / CS / Business / Risk / Compliance

Master's or specialized privacy governance qualification

Certifications: CIPP/E / CIPM / CIPT / FIP / 27701 Lead

Descrição da oferta de emprego

Job Summary

ESDS Software Solution Limited is looking for an experienced Data Protection Officer (DPO) to lead and monitor enterprise-wide data privacy governance and compliance. The ideal candidate will have strong knowledge of India's Digital Personal Data Protection Act (DPDP Act, 2023), GDPR, UK GDPR, privacy risk management, and regulatory compliance.

The role involves advising management on privacy obligations, monitoring compliance frameworks, managing privacy risks, supporting data breach response, and promoting privacy by design across business and technology functions.

Key Responsibilities

• Monitor compliance with the DPDP Act, GDPR, UK GDPR, and other applicable data protection regulations.
• Develop, review, and maintain privacy policies, notices, procedures, and governance frameworks.
• Advise on Data Protection Impact Assessments (DPIAs), privacy risk assessments, and privacy by design.
• Oversee data principal/data subject rights requests, privacy grievances, and regulatory correspondence.
• Support personal data breach assessment, reporting, investigation, remediation, and documentation.
• Review third-party vendor agreements, data processing agreements, and privacy risk assessments.
• Advise on cross-border data transfers and associated privacy safeguards.
• Coordinate with Legal, Information Security, IT, HR, Procurement, and business teams.
• Drive privacy awareness programmes, employee training, audits, and compliance assessments.
• Prepare privacy risk dashboards and periodic reports for senior management and the Board.
• Monitor regulatory developments and recommend updates to policies and controls.

Required Skills

• Data Protection and Privacy Compliance
• Digital Personal Data Protection Act (DPDP Act, 2023)
• GDPR and UK GDPR
• Data Protection Impact Assessment (DPIA)
• Privacy Governance and Risk Management
• Data Mapping and Records of Processing Activities (RoPA)
• Data Breach Management and Incident Response
• Vendor Risk and Third-Party Data Processing
• Cross-Border Data Transfer Compliance
• Privacy Policy Drafting and Regulatory Liaison
• Audit, Compliance Reporting, and Stakeholder Management

Educational Qualifications

• Bachelor's degree in Law, IT, Computer Science, Business Administration, Risk, Compliance, or a related discipline.
• Master's degree or specialised qualification in privacy, cyber law, governance, risk, or compliance preferred.
• Certifications such as CIPP/E, CIPM, CIPT, FIP, ISO/IEC 27701 Lead Implementer/Auditor, or equivalent are preferred.

Experience Requirements

• Minimum 5+ years of experience in data privacy, data protection, legal compliance, risk management, or a related governance function.
• Practical experience supporting GDPR and/or DPDP compliance programmes.
• Experience in DPIAs, privacy policies, data subject rights, breach response, audits, and vendor assessments.
• Strong communication, policy drafting, regulatory interpretation, and senior stakeholder management skills.

Preferred Candidate Profile

Candidates with experience in IT services, cloud computing, data centres, technology companies, information security, or enterprise compliance environments will be preferred.