Senior Manager- Data Privacy

IndiGo; Gurugram District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

IndiGo is seeking a senior privacy lawyer/compliance lead to drive global data privacy programs and embed privacy-by-design across business operations. You will oversee DPAs, DPIAs, cross-border data transfers, and regulatory advisory while coordinating with IT and security teams.

The role requires deep knowledge of GDPR, EU/UK SCCs, and global privacy regimes, plus experience in multinational environments. A privacy-first culture will be fostered through training and awareness initiatives.

Qualifications

• Strong knowledge of GDPR, EU SCCs, UK SCCs, and global privacy laws.
• Experience with DPAs and DPIAs, data mapping and compliance frameworks.
• Familiarity with ISO 27701, DPDPA, CCPA and other global regulations.
• Ability to balance legal, technical, and operational privacy requirements.

Responsibilities

• Contractual review, drafting, and negotiation of DPAs and SCCs.
• Lead GDPR-compliant framework implementations across processes.
• Provide regulatory advisory on privacy laws and data transfers.
• Collaborate with IT/security to ensure TOMs and secure data practices.
• Conduct DPIAs for new systems and initiatives; identify risks.
• Deliver privacy training and promote a privacy-first culture.

Skills

Analytical mindset

Project management

Cross-functional collaboration

Excellent communication

Privacy tools experience

Education

LLB (Bachelor of Law)

Certifications: CIPP/E

Certifications: CIPM

Certifications: CIPT

Tools

OneTrust

TrustArc

Job description

Summary

Part of the Legal / Compliance function, responsible for driving global data privacy programs, ensuring regulatory compliance, and embedding privacy-by-design principles across business operations. Plays a critical role in safeguarding personal data, mitigating privacy risks, and aligning legal, technical, and operational requirements.

Key Responsibilities

Contractual Review & Negotiation

• Review, draft, and negotiate Data Processing Agreements (DPAs), EU SCCs, and UK SCCs in line with regulatory and organizational requirements.
• Advise stakeholders on contractual privacy risks and propose mitigation strategies.
• Support cross-border data transfer assessments and related documentation.

Privacy Regulation Implementation

• Lead/support implementation of GDPR-compliant frameworks across business processes.
• Conduct gap assessments against GDPR, DPDPA, CCPA, ISO 27701, and other applicable laws.
• Recommend remediation actions and ensure closure of compliance gaps.

Legal & Regulatory Advisory

• Provide expert guidance on privacy laws, including international data transfers.
• Monitor global privacy regulations and assess business impact.
• Translate regulatory requirements into actionable internal policies and controls.

Technical & Security Controls

• Collaborate with IT and Information Security teams to ensure appropriate technical and organizational measures (TOMs).
• Review privacy-enhancing technologies and secure data practices.
• Align legal requirements with operational security measures.

Privacy Impact Assessments (PIA/DPIA)

• Conduct DPIAs for new systems, processes, and business initiatives.
• Identify, assess, and mitigate risks related to personal data processing.

Training & Awareness

• Deliver privacy training and awareness sessions across functions.
• Promote a strong privacy-first culture within the organization.

Preferred Skills

• Strong analytical and problem-solving mindset.
• Ability to manage multiple projects simultaneously.
• Collaboration across legal, IT, security, and business teams.
• Excellent communication and stakeholder management skills.
• Experience with privacy tools (OneTrust, TrustArc, etc.).

Technical & Functional Expertise

• Strong knowledge of GDPR, EU SCCs, UK SCCs, and global privacy laws.
• Experience with DPAs, DPIAs, data mapping, and compliance frameworks.
• Understanding of technical security controls and risk management principles.
• Familiarity with ISO 27701, DPDPA, CCPA, and other global regulations.

Certifications (Mandatory)

• CIPP/E
• CIPM
• CIPT

Qualifications and Education

• LLB (Bachelors degree in Law)

Experience Requirements

• 10–12 years of experience in data privacy, data protection, or regulatory compliance roles.
• Demonstrated experience balancing legal, technical, and operational privacy requirements.

Preferred Experience

• Experience working in multinational or regulated environments.
• Familiarity with global privacy regimes (e.g., PDPA, PIPL).

Behavioral Competencies

• Strong problem-solving and analytical skills
• Attention to detail and accuracy
• Proactive and solution-oriented approach
• Ability to work under pressure and manage multiple priorities
• Adaptability and continuous learning mindset