Manager- Privacy

Larsen & Toubro Limited; Mumbai; On-site; INR 1,500,000 - 1,900,000; Full time

Job summary

PeopleStrong is seeking a DPDP privacy and compliance professional to lead end-to-end DPDP program execution. The role involves implementing policies, processes, and controls to ensure DPDP obligations are met across the organization, with close coordination with stakeholders and vendors.

You will drive data inventory, DPIA, retention, breach management, and privacy notices, while aligning with regulatory guidance and audits.

Qualifications

• Sound understanding of DPDP Act, 2023 and applicable Rules.
• Understanding of privacy principles including data inventory, data flows, consent, Data Principal rights, retention, deletion, PIA, DPIA and breach management.
• Knowledge of ISO 27001, ISO 27701 and other privacy/ security frameworks.
• Understanding of Privacy tools and their use in DPDP compliance.

Responsibilities

• Drive the end-to-end DPDP compliance and implementation program across L&T group companies.
• Ensure policies, processes, controls and actionable implementation requirements are rolled out to meet DPDP obligations.
• Coordinate with Business stakeholders for implementation of DPDP rollout.
• Drive implementation of key DPDP requirements including data inventory/ RoPA, privacy notices, consent, Data Principal rights, DPIA, retention/deletion, breach management and third-party privacy compliance.
• Drive selection and rollout of Privacy required to operationalize DPDP compliance.
• Review and challenge vendor deliverables and ensure quality, timelines and regulatory alignment.
• Drive UAT, go-live and implementation of privacy solutions across L&T group companies.
• Monitor changes in DPDP Rules/ regulatory guidance and assess impact on the organization.
• Drive rollout of security safeguards (encryption, masking etc) as per regulatory and business requirements
• Ensure adequate evidence and documentation is maintained to demonstrate compliance.
• Support internal/ external audits

Job description

1. Sound understanding of DPDP Act, 2023 and applicable Rules. 2. Understanding of privacy principles including data inventory, data flows, consent, Data Principal rights, retention, deletion, PIA, DPIA and breach management. 3. Knowledge of ISO 27001, ISO 27701 and other privacy/ security frameworks. 4. Understanding of Privacy tools and their use in DPDP compliance. 6

Job Responsibilities:

1. Drive the end-to-end DPDP compliance and implementation program across L&T group companies. 2. Ensure policies, processes, controls and actionable implementation requirements are rolled out to meet DPDP obligations 3. Coordinate with Business stakeholders for implementation of DPDP rollout. 4. Drive implementation of key DPDP requirements including data inventory/ RoPA, privacy notices, consent, Data Principal rights, DPIA, retention/deletion, breach management and third-party privacy compliance. 5. Drive selection and rollout of Privacy required to operationalize DPDP compliance. 6. Review and challenge vendor deliverables and ensure quality, timelines and regulatory alignment. 7. Drive UAT, go-live and implementation of privacy solutions across L&T group companies. 8. Monitor changes in DPDP Rules/ regulatory guidance and assess impact on the organization. 9. Drive rollout of security safeguards (encryption, masking etc) as per regulatory and business requirements 10. Ensure adequate evidence and documentation is maintained to demonstrate compliance. 11. Support internal/ external audits