Deputy Manager

HCL Technologies Limited; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

HCLTech is seeking a Data Privacy - Risk and Compliance professional to conduct privacy assessments, DPIAs and reviews. You will evaluate data flows, retention, sharing and regulatory adherence across GDPR, DPDP Act, and CCA.

Responsibilities include maintaining ROPA, supporting privacy governance, and coordinating privacy reviews with business teams and auditors.

Qualifications

• Privacy risk assessments, DPIAs/PIAs and reviews.
• Review data flows, data collection, processing, retention and sharing.
• Support GDPR, DPDP Act, CCA compliance.

Responsibilities

• Perform privacy assessments and compliance reviews.
• Identify privacy gaps and remediation actions.
• Maintain Records of Processing Activities (ROPA).
• Support privacy policies, governance, and training.
• Assist with privacy reviews of third-party contracts and data transfers.

Skills

Privacy risk assessments

Regulatory compliance

Stakeholder engagement

Privacy by design

Education

BE/B.Tech / BCA/BSc

Tools

DPAs

SCCs

TIAs

Job description

We're Hiring for Data Privacy - Risk and Compliance in HCLTech

Education: BE/B.Tech / BCA/BSc

No of position - 1

Key Responsibilities:

• Privacy Assessments & Compliance
• Conduct Privacy Risk Assessments (PRAs), Privacy Impact Assessments and Data Protection Impact Assessments (PIAs/DPIAs), and Privacy by Design reviews.
• Evaluate new and changes to applications, business processes, AI solutions, automation initiatives, and third-party services to identify and assess privacy risks.
• Review data flows, data collection practices, processing activities, retention requirements, and data sharing arrangements.
• Identify privacy compliance gaps and recommend appropriate remediation measures.
• Assess adherence to core privacy principles, including lawful basis, purpose limitation, data minimization, retention, and transparency.
• Support compliance with GDPR, DPDP Act, CCA, and other applicable global data protection regulations.
• Privacy Governance & Operations
• Maintain and periodically update Records of Processing Activities (ROPA).
• Support implementation and ongoing monitoring of privacy controls and governance requirements.
• Administer privacy assessment repositories, risk registers, and compliance documentation.
• Monitor privacy risks, issues, and remediation actions through formal closure.
• Support the development and maintenance of privacy policies, standards, procedures, and guidance documents.
• Third-Party & Customer Privacy Reviews
• Review privacy-related contractual provisions, Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and customer-specific contractual requirements.
• Conduct Transfer Impact Assessments (TIAs) and reviews of cross-border data transfer arrangements.
• Support responses to customer privacy questionnaires, requests for proposals (RFP), audits, and due diligence activities.
• Incident & Regulatory Support
• Participate in the assessment and management of privacy incidents and potential personal data breaches.
• Coordinate investigations in collaboration with Security, Risk, and relevant Business teams.
• Monitor corrective and preventive actions arising from privacy incidents through to closure.
• Provide support in responding to regulatory inquiries and conducting compliance reviews.
• Stakeholder Engagement
• Partner with enterprise and delivery teams to integrate privacy-by-design and privacy-by-default principles into projects.
• Serve as a privacy advisor to business, delivery, and technology teams.
• Develop and deliver privacy awareness and training sessions.
• Provide support for internal and external audits.
• Prepare privacy metrics, dashboards, leadership reports, and management presentations.
• Collaborate with Privacy Champions and data owners to drive privacy compliance initiatives

Preferred Certifications :-

CIPP/E, CIPP/US, CIPM, CIPT, I, ISO 27701 Lead Implementer, or equivalent privacy certifications