Manager - Corporate Legal

Tata Communications; Mumbai; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Tata Communications in Mumbai is seeking a privacy-focused professional to manage the implementation of the company’s privacy framework. You will apply privacy-by-design, collaborate with product teams, and oversee PIAs, ROPA, and data-flow controls to ensure regulatory compliance throughout the product lifecycle.

The ideal candidate has 3+ years in privacy roles, strong understanding of data flows, encryption, access controls, and privacy governance tools, with highly desirable certifications

Qualifications

• Bachelors or Masters degree in Computer Science, Telecommunication Engineering, Information Technology, or related field.
• Minimum 3 years of experience in privacy and data protection roles.
• Strong understanding of application architecture, data flows, and security protocols.
• Hands-on experience with privacy-enhancing technologies and privacy governance tools and software.
• Certifications such as DCPP, CIPP, CIPT, FIP, CISSP, CISA or CISM are highly desirable.
• Excellent communication, stakeholder engagement, and analytical skills.

Responsibilities

• Review and embed privacy-by-design and privacy engineering principles into products and processes.
• Collaborate with Business Functions and Product Teams to define and implement privacy controls.
• Conduct Privacy Impact Assessments (PIAs), ROPA, Data Flow Diagrams, etc. for new and existing products and processes.
• Evaluate and implement technical safeguards including encryption, pseudonymization, and secure access controls.
• Monitor and interpret global privacy regulations (e.g., GDPR, DPDP Act) and translate them into actionable requirements.
• Develop and maintain privacy notices, consent mechanisms, and data handling protocols.
• Manage incident response and breach management.
• Provide technical guidance and training to cross-functional teams on privacy best practices.

Skills

Privacy by design

PIA

Data protection

Regulatory compliance

Encryption

Access controls

Security protocols

Stakeholder engagement

Education

Bachelors/Masters in CS/IT/Telecom

DCPP

CIPP

CIPT

FIP

CISSP

CISA

CISM

Job description

The candidate will manage implementation of the Company's privacy framework. The ideal candidate should possess deep technical expertise in data privacy, application architecture, information security, and access control protocols, enabling proactive privacy risk management and regulatory compliance throughout the product lifecycle.

Key Responsibilities

• Review and embed privacy-by-design and privacy engineering principles into products and processes.
• Collaborate with Business Functions and Product Teams to define and implement privacy controls.
• Conduct Privacy Impact Assessments (PIAs), ROPA, Data Flow Diagrams, etc. for new and existing products and processes.
• Evaluate and implement technical safeguards including encryption, pseudonymization, and secure access controls.
• Monitor and interpret global privacy regulations (e.g., GDPR, DPDP Act) and translate them into actionable requirements.
• Develop and maintain privacy notices, consent mechanisms, and data handling protocols.
• Manage incident response and breach management.
• Provide technical guidance and training to cross-functional teams on privacy best practices.

Qualifications & Skills

• Bachelors or Masters degree in Computer Science, Telecommunication Engineering, Information Technology, or related field.
• Minimum 3 years of experience in privacy and data protection roles.
• Strong understanding of application architecture, data flows, and security protocols.
• Hands-on experience with privacy-enhancing technologies and privacy governance tools and software.
• Certifications such as DCPP, CIPP, CIPT, FIP, CISSP, CISA or CISM are highly desirable.
• Excellent communication, stakeholder engagement, and analytical skills.