Hiring for-Senior Specialist, Privacy and Technology Compliance- BNGLR

Infosys BPM; Bengaluru; Vor Ort; INR 1.200.000 - 1.800.000; Vollzeit

Zusammenfassung

Infosys BPM Ltd. in Bengaluru is seeking a Senior Specialist, Privacy and Technology Compliance Domain.

The role focuses on privacy impact assessments, data handling reviews, and technology compliance, collaborating with product, engineering, and business teams to surface privacy and security risks early. Key tasks include conducting PIAs, reviewing data practices, and supporting regulatory alignment, with emphasis on OSFI B-13, PCI DSS, and privacy laws such as PIPEDA and Quebec Law 25.

Qualifikationen

• Experience in privacy, data protection, or technology compliance roles.
• Familiarity with privacy impact assessments and data handling reviews.
• Strong written English and ability to explain risk clearly.

Aufgaben

• Conduct PIAs for new products, features, vendors, and data uses in line with applicable laws.
• Review data collection, use, retention, minimisation, consent, access, and cross-border transfers.
• Support privacy incident assessment and regulatory/audit documentation.
• Assist technology controls assessments against standards like PCI DSS and OSFI B-13.

Kenntnisse

Privacy compliance

Data protection

PIA experience

Written English

Ausbildung

Law degree

Tools

PCI DSS

OSFI B-13

AI governance

Jobbeschreibung

Greetings from Infosys BPM Ltd.,

We are hiring for Senior Specialist, Privacy and Technology Compliance Domain for Bangalore.

Please find below Job Description for your reference:

• Job Location: Bengaluru
• Qualification: Degree In Law (Full Time)
• Total years of Experience: 6-8 Years relevant experience
• Notice Period: Immediate to 15 Days Only
• Shift: Flexible to work for any shift
• Work From Office is mandatory.
• Type: Individual contributor

Note:

we are looking for Risk & Compliance Privacy.

Role Summary:

The Senior Specialist, Privacy and Technology Compliance supports privacy and technology compliance program through privacy impact assessments, data handling reviews, and technology compliance assessments. The role works with product, engineering, and business teams to identify privacy and technology risks early and recommend practical mitigations.

Assessments follow a template; the risks often do not. A feature uses data in a way nobody described as new, a vendors data flow crosses a border that was not in scope, or a technical control exists but does not do what the assessment assumes. The role is expected to ask the questions that surface these, and to be clear about the residual risk. These are the cases the role exists to get right.

Privacy Officer accountability, risk acceptance, and final approval decisions remain.

Key Responsibilities:

Privacy Impact Assessments:

• Conduct PIAs for new products, features, vendors, and data uses, in line with PIPEDA, Quebecs Law 25, and applicable provincial requirements.
• Identify privacy risks and recommend proportionate mitigations.
• Track recommendations through to implementation.

Data Handling Reviews:

• Review data collection, use, retention, minimisation, consent, access, and cross-border transfers.
• Maintain data inventories and records of processing.
• Identify data handling practices that have drifted from stated policy.

Privacy Operations Support:

• Support privacy incident and breach assessment, including real risk of significant harm analysis, for decision.
• Support individual access and correction requests.
• Maintain clear documentation for regulatory and audit purposes.

Technology Compliance:

• Support assessment of technology and cyber controls against OSFI B-13 and applicable industry standards such as PCI DSS.
• Support vendor security and privacy reviews.
• Support reviews of new technologies, including AI and machine learning use cases, for privacy and compliance risk.

Experience & Qualifications:

Level and Tenure:

• Intermediate Process Associate to Manager (PAM).
• 6-8 years in privacy, data protection, or technology compliance.
• Degree in law, information systems, or a related discipline, or equivalent experience.

Required Skills and Experience:

• Strong working knowledge of PIPEDA and Quebecs Law 25.
• Hands-on experience conducting PIAs and data handling reviews.
• Enough technical understanding of systems and data flows to ask the right questions of engineering teams.
• Sound judgement on residual risk, with the ability to explain it plainly. Assessed at interview through a case exercise.
• Clear, precise written English.

Preferred:

• CIPP/C, CIPM, CIPT, CISA, or CISSP designation.
• PCI DSS experience.
• Familiarity with cloud environments and AI governance.
• French language proficiency.