Manager - Data Privacy

SBI Card; Gurugram District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

SBI Card seeks a qualified Data Privacy professional to coordinate and monitor data protection programs in line with Indian regulations and company policies. The role focuses on DPIAs, incident response, audits, and cross-functional governance to ensure ongoing privacy compliance.

The candidate will engage with stakeholders, drive privacy initiatives, and maintain documentation while aligning with SBI Card's mission to make life simple and protect customer data.

Qualifications

• Industry-standard certifications such as DCPP/DCPLA are desirable.
• Understanding of regulatory data privacy compliance and audit background is essential.
• Familiarity with risk assessments and privacy frameworks (NIST, DSCI, ISO, PCI, GDPR).

Responsibilities

• Align business processes with Data Privacy laws and SBI Card policies.
• Review controls and provide recommendations on data protection and privacy.
• Facilitate periodic Data Protection Impact Assessments (DPIAs).
• Support incident response and data breach notification procedures.
• Participate in audits and assessments; communicate with stakeholders.
• Drive privacy-related projects and maintain governance documentation.

Skills

DSCI Privacy Cert

Security & compliance

Audit & risk

Privacy frameworks

Regulatory knowledge

Education

Graduate in CS/InfoSec

Tools

PCI-DSS

ISO27001

Job description

JOB DESCRIPTION

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What’s In It For YOU

• SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
• Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees
• Dynamic, Inclusive and Diverse team culture
• Gender Neutral Policy
• Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
• Commitment to the overall development of an employee through comprehensive learning & development framework

Role Purpose

Responsible for coordinating, embedding and monitoring of data protection and privacy compliance in accordance with SBI card polices and procedures and applicable regulations.

Role Accountability

• Align business processes and operational practices, and support in preparation, maintenance and rollout data protection policies and procedures as per the Data Privacy act of India and any other Data Privacy law as applicable
• Review controls to inform, advise and issue recommendations to the business with regards to data protection, privacy including with data protection laws and internal policies and guidelines
• Facilitate periodic data protection impact assessments
• Support the data incident response and data breach notification procedures
• Support 1st line of defense (controllers/ processors) and Data Privacy officer(DPO) regarding data protection and privacy management requirements and policies as well as for communication for both data subjects (e.g. customers) and the regulatory authorities
• Promote continuous training to maintain data protection awareness and feedback, and also include protection
• Offer consultation once a data breach or other incident has occurred and must be involved in relevant issues in a timely manner and report directly to highest management level
• Participate and represent team in internal and External audits and assessments
• Manage privacy related projects including stakeholder update and drive timely and quality deliverables
• Monitor marketplace trends and latest experiences on security, audit and control issues
• Perform process documentation and compliance adherence

Measures of Success

• Timely and accurate development and monitoring of the Data Privacy program
• Setup and Increase the maturity of overall Data Privacy Program
• Timely and in-budget completion of data privacy related projects & Initiatives
• Timely delivery of project plans, milestone updates, presentations, assessment reports etc. to relevant stakeholders
• Process Adherence as per MOU

Technical Skills / Experience / Certifications

• Industry-standard certifications such DCPP (DSCI Certified Privacy Professional), DSCI Certified Privacy Lead Assessor (DCPLA),
• Understanding of regulatory data privacy compliance, Information security or audit background is must
• Understanding of security controls from a people, process and technology perspective
• Knowledge of standard security processes and guidelines
• PCI-DSS, ISO27001 and audit management experience
• Knowledge of risk assessments and privacy frameworks such as - NIST, DSCI, ISO, PCI, GDPR, etc.

Competencies critical to the role

• Stakeholder Management
• Teamwork and Collaboration
• Detail Orientation
• Market Awareness
• Process Orientation

Qualification

Graduate or advance course in Computer Science or Information Security related areas or any other relevant discipline

Preferred Industry

FSI