Senior Data Governance - Data Privacy - SC - CDO - Data Support (pipeline)

Capco; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Capco in Bengaluru seeks a Senior Manager – Data Governance Specialist to lead a robust data governance program across a regulated environment. You will oversee data risk, privacy controls, DSRs, cross-border transfers, and AI governance to ensure regulatory and internal standards are met.

You will partner with Process Owners, CDO, HR, Legal and Compliance to drive privacy-by-design and data sovereignty initiatives, while building capabilities, training teams and embedding strong governance

Qualifications

• 8+ years in financial services with focus in Data Governance, Data Privacy, Data Sovereignty and Responsible AI.
• Strong knowledge of major data protection regimes (GDPR, PDPA, PIPL).
• Excellent organizational and leadership skills with end-to-end risk remediation experience.
• Effective communication, collaboration and stakeholder management; practical privacy concepts.

Responsibilities

• Provide oversight and SME support to Process Owners on Data Risk Assessments.
• Establish and enforce data privacy controls to ensure regulatory compliance.
• Optimize Data Subject Requests workflows across HR, IT and Legal/compliance.
• Embed privacy-by-design and support data-driven decision making.
• Assess remediation for Country Data Sovereignty regulations and approvals.
• Conduct horizon risk scanning for Data Privacy, Sovereignty and AI governance.
• Support AI governance forums and RAI review processes.
• Collaborate with stakeholders to accelerate AI use-case approvals.

Skills

Data governance

Data privacy

Data sovereignty

Responsible AI

Stakeholder management

Leadership

Communication

Regulatory compliance

Education

Bachelor’s / Master’s in Computer Science/IT

Job description

Role Summary

We are seeking a highly experienced and strategic Senior Manager – Data Governance Specialist to lead and strengthen our data governance framework within a complex and highly regulated environment. This role is pivotal in ensuring the responsible, compliant, and ethical use of data across multiple jurisdictions. The successful candidate will provide comprehensive oversight and drive compliance on data risks, cross‑border data transfers, and AI usage within S&T processes, ensuring adherence to both regulatory requirements and internal standards.

Responsibilities

• Provide oversight and SME support to Process Owners in completing Data Risk Assessments for S&T processes, in partnership with the Chief Data Office, to ensure data risks are assessed from the inception.
• Establish and enforce effective oversight and management of Data Privacy controls (e.g., maintenance of Privacy Notices, Cookies Policy, Consent Management solutions, Data Breaches) to ensure compliance with regulatory requirements and internal standards.
• Optimize the S&T process for Data Subject Requests (DSR) by streamlining workflows and ensuring clear communication channels. Collaborate with stakeholders including HR, IT, DSP (Data Shield Programme), DPN (Document Preservation Notice), Legal and Compliance advisors, to facilitate the timely and accurate handling of DSRs.
• Partner with Process Owners to identify opportunities for improvement, embed privacy‑by‑design into processes, systems and initiatives, and support data‑driven decision‑making to achieve strategic objectives.
• Assess and implement remediation action plans to comply with Country Data Sovereignty regulations (e.g. Data Localization, Cross Border Data Restrictions, Regulatory Approvals) to comply with regulatory obligations.
• Conduct regulatory horizon risk scanning for Data Privacy, Data Sovereignty and Responsible Artificial Intelligence to continuously monitor evolving laws and regulations to maintain regulatory compliance.
• Support the S&T Federated AI governance forum to review AI use‑cases across S&T for approval within the forum.
• Enforce RAI Governance for S&T through collaboration with RAI CDO and HCAI team to simplify & optimize RAI review process, ensure controls are adhered and facilitate expansive AI adoption.
• Collaborate and support Process Owners in the RAI review process to accelerate approval of AI use cases within S&T to achieve the overall Group RAI strategic objectives.
• Conduct regular training and awareness sessions to equip S&T colleagues with relevant Data Privacy and Data Sovereignty knowledge to handle personal and sensitive personal data.
• Support Data Governance initiatives to ensure S&T compliance with the Group Data Conduct Policy and the associated internal standards.
• Collaborate with relevant stakeholders (HR Service Delivery, Business Heads, Process Owners, Product Owners, GPS, S&T functions) and drive the program deliverables to reduce data risks within the S&T function.
• Manage audit requests and provide timely management responses to findings, including remediation actions.
• Ensure controls are measured and metrics are provided to all relevant forums including maintaining a detail‑oriented approach with a focus on structured documentation.

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, elevate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

Head – Governance & Controls, PIA / Workforce Analytics teammates in Group, GPS teams, Business Heads, Product Owners, other parties requesting and using data inside and outside of S & T, Global/Regional HR/HRSD, Country HR/HRSD, Process Owner, Product Owners/Business Owners in HR, ITO, SCM (Supply Chain Management), CABM (Corporate Affairs Brand and Marketing) & CRES (Corporate Real Estate Service), DDO (Data Domain Owner), CFCC (Conduct, Financial Crime and Compliance), CDO (Chief Data Officer), ICS (Information and Cyber Security).

Qualifications, Training, Licences, Memberships and Certifications

EDUCATION: Bachelor’s / Master’s Degree / Computer Applications / Computer Science / Information Technology, or its equivalent.

TRAINING / EXPERIENCES: Minimum 8+ years of experience in financial services industry (preferably in HR, SCM function) with focus in Data Governance, Data Privacy, Data Sovereignty, Responsible Artificial Intelligence skills. Strong understanding of major data protection regimes (e.g. GDPR, PDPA, PIPL). Excellent organisational and leadership skills (successfully lead and managed end‑to‑end risk remediation activities) with ability to manage multiple deadlines and effectively prioritise. Effective communication, collaboration, and stakeholder management skills, with the ability to explain privacy concepts in a practical, business friendly way. Strong analytical skillset with high diligence and self‑motivated approach to delivering outcomes. Strong verbal and written communication skills with experience in preparing and presenting detailed and executive level material. Strong sense of personal ownership and responsibility in accomplishing the organisation’s goal. Is confident and will roll‑up his/her sleeves to drive success. Able to get things done in a quick‑paced environment. Be transparent and open around what does not work and what does, proposing changes where necessary.

LICENSES: NA. MEMBERSHIP: NA. CERTIFICATIONS: Privacy certifications (e.g. CIPP/E, CIPPA/A, CIPM), Artificial Intelligence Governance Professional (AIGP), CISA (Certified Information Systems Auditor). Trained or certified will be an added advantage.

LANGUAGES: English (excellent written and oral communication skills) and presentation skill would be required.