Manager/Assistant Manager - Privacy (Cybersecurity)

Larsen & Toubro (L&T); Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Larsen & Toubro Ltd, headquartered in Mumbai, seeks a DPDP compliance lead to drive end-to-end privacy and DPDP rollout across the group. The role focuses on data inventory, DPIA, consent management, retention, and breach handling with emphasis on regulatory alignment.

The candidate will coordinate with business stakeholders and monitor DPDP rule changes while ensuring robust evidence and audits for all privacy implementations at L&T's Head Office in Powai, Mumbai.

Qualifications

• Sound understanding of DPDP Act, 2023 and applicable Rules.
• Knowledge of data inventory, data flows, consent and data principal rights.
• Familiarity with ISO 27001, ISO 27701 and related privacy frameworks.
• Experience with privacy tools and DPIA/ breach management.

Responsibilities

• Drive the end-to-end DPDP compliance and implementation program across L&T group companies.
• Ensure policies, processes and controls are rolled out to meet DPDP obligations.
• Coordinate with business stakeholders for DPDP rollout.
• Drive DPDP requirements including data inventory, RoPA, notices, consent and DPIA.
• Oversee security safeguards and third-party privacy compliance rollout.
• Support audits and maintain evidence of compliance.

Skills

DPDP Act 2023

Privacy Principles

Privacy Frameworks ISO 27001/27701

Privacy Tools

Tools

Privacy tools

Job description

Job Description:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies.

L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This job is based out of the Head Office of L&T (Powai, Mumbai).

Job Responsibilities:

• Drive the end-to-end DPDP compliance and implementation program across L&T group companies.
• Ensure policies, processes, controls and actionable implementation requirements are rolled out to meet DPDP obligations .
• Coordinate with Business stakeholders for implementation of DPDP rollout.
• Drive implementation of key DPDP requirements including data inventory/ RoPA, privacy notices, consent, Data Principal rights, DPIA, retention/deletion, breach management and third-party privacy compliance.
• Drive selection and rollout of Privacy required to operationalize DPDP compliance.
• Review and challenge vendor deliverables and ensure quality, timelines and regulatory alignment.
• Drive UAT, go-live and implementation of privacy solutions across L&T group companies.
• Monitor changes in DPDP Rules/ regulatory guidance and assess impact on the organization.
• Drive rollout of security safeguards (encryption, masking etc) as per regulatory and business requirements.
• Ensure adequate evidence and documentation is maintained to demonstrate compliance.
• Support internal/ external audits

Skills Required :

1. Sound understanding of DPDP Act, 2023 and applicable Rules.
2. Understanding of privacy principles including data inventory, data flows, consent, Data Principal rights, retention, deletion, PIA, DPIA and breach management.
3. Knowledge of ISO 27001, ISO 27701 and other privacy/ security frameworks.
4. Understanding of Privacy tools and their use in DPDP compliance.

Certifications:

CIPP/A, CIPP/E, CIPM, CIPT, ISO 27701 Lead Auditor/ Implementer are desirable.