Manager

HDB Financial Services Ltd.; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

HDB Financial Services Ltd. is seeking a Manager for Data Protection to bridge legal requirements and technology implementation. The role ensures compliance with the Digital Personal Data Protection Act (DPDP Act).

Ideal candidates possess 5–8 years of experience in privacy and cybersecurity, alongside a relevant degree. Responsibilities include implementing privacy controls across applications and monitoring compliance.

Qualifications

• 5–8 years of experience in privacy, data protection, or cybersecurity.
• Focus on PET implementation is essential.
• Experience in the NBFC or financial sector is a plus.

Responsibilities

• Translate privacy requirements into technical controls across applications.
• Implement Privacy by Design and Default across various systems.
• Ensure compliance with DPDP and internal governance standards.

Skills

Data Protection

Cybersecurity

Data Engineering

Analytical Skills

Communication

Problem-Solving

Collaboration

Education

Bachelor’s or Master’s in Computer Science, IT, Cybersecurity

Certifications like CIPT, CDPSE

Tools

Encryption

Data Classification Tools

Data Masking Technologies

Job description

Position Summary

The Manager Data Protection will act as the technical arm of the Data Protection Office, enabling implementation of privacy-by-design principles across business systems, digital lending platforms, customer onboarding journeys, analytics environments, and third‑party integrations. The role bridges legal privacy requirements and technology implementation, ensuring that personal data processing within HDB complies with the Digital Personal Data Protection Act (DPDP Act) and internal privacy governance standards.

Key Responsibilities

• Translate privacy requirements into technical controls across applications and infrastructure.
• Implement Privacy by Design and Default across lending, collections, CRM, analytics, and mobile applications.
• Support deployment of data minimization controls, purpose limitation enforcement, and consent‑based processing logic.
• Work with DevOps and product teams to embed privacy controls in SDLC.
• Identify data flows across loan origination systems, KYC platforms, collection systems, third‑party fintech integrations, and cloud environments.
• Implement and monitor consent management platforms.
• Ensure systems enforce purpose‑linked consent, withdrawal of consent workflows, and consent audit trails.
• Support privacy UX improvements aligned with DPDP requirements.
• Provide technical analysis during Data Protection Impact Assessments (DPIA), vendor privacy assessments, and new product launches.
• Identify privacy risks in architecture diagrams and system designs, and recommend mitigation controls.
• Develop dashboards for privacy compliance monitoring.
• Implement automated checks for unauthorized data access and excessive data retention.
• Support audit readiness for DPDP, ISO 27701, and RBI inspections.
• Review technical architecture of processors and fintech partners.
• Validate data‑sharing mechanisms, encryption, and minimization controls.

Qualifications and Skills

Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related fields. Certifications such as CIPT, CDPSE or similar are preferred.

Experience: 5–8 years of experience in privacy, data protection, technology, cybersecurity, data engineering, or a related technical role, with a focus on PET implementation. Experience in the NBFC or financial sector is a plus.

Technical expertise: Proficiency in PETs like encryption, anonymization, pseudonymization, and secure computation. Knowledge of data discovery, classification tools, and data masking technologies. Familiarity with privacy frameworks and regulations, including PDP Act and GDPR.

Analytical skills: Ability to assess privacy risks and design effective technological solutions.

Communication skills: Strong communication skills to collaborate with cross‑functional teams and explain technical concepts to non‑technical stakeholders.

Problem‑solving: Demonstrated ability to resolve complex technical privacy challenges.

Collaboration: Experience working with IT, legal, and compliance teams to achieve privacy goals.