Senior Manager - Risk - Data Privacy - Mumbai - Goregaon (E)

TATA Capital; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

TATA Capital is seeking a data privacy governance professional to lead RoPA efforts, track personal data flows, and support DPDP tool integration across TCL and TCHFL. The role requires coordinating with business teams to deploy privacy tools across upstream and downstream systems and delivering training on privacy technologies.

Ideal candidates bring 2–5 years in data privacy/governance or information security, with strong GDPR/DPDPA/CCPA knowledge and excellent stakeholder communication skills.

Qualifications

• Bachelor’s degree in Engineering, Information Security, Computer Science or related field.
• Master’s degree in MBA, IT, Information Security or related field.
• 2–5 years of total experience in data privacy/governance or information security.
• Strong knowledge of GDPR, DPDPA, CCPA/CPRA and other international privacy regulations.

Responsibilities

• Create and manage data flow diagrams to track personal data across systems.
• Prepare and update RoPA in line with regulatory requirements.
• Work on technical integration of DPDP tool with systems across TCL and TCHFL.
• Collaborate with Business teams to implement privacy tool across Upstream and Downstream systems.
• Provide training and awareness sessions on data privacy tool and integration.
• Design, evaluate, and advise on technical privacy safeguards to ensure compliance with global regulations.
• Review contracts and data processing agreements to ensure alignment with privacy obligations.

Skills

Data privacy

Governance

Information security

Stakeholder mgmt

Communication

GDPR knowledge

Education

Bachelor's degree

Master's degree

Job description

Main Accountabilities

• Create and manage data flow diagrams to track personal data across systems.
• Prepare and update Records of Processing Activities (RoPA) in line with regulatory requirements.
• Work on Project for technical integration of DPDP tool with systems across TCL and TCHFL
• Work with Business teams to implement privacy tool across all Upstream and Downstream systems
• Provide training and awareness sessions on data privacy tool and integration.
• Design, evaluate, and advise on technical privacy safeguards such as encryption, pseudonymization, access control, and other privacy-enhancing technologies to ensure compliance with global data protection regulations.
• Review contracts and data processing agreements to ensure alignment with privacy and regulatory obligations.

Qualifications & Experience

• Bachelor’s degree in Engineering, Information Security, Computer Science, or related field.
• Master’s degree in MBA, IT, Information Security or related field.
• 2-5 years of total experience in data privacy/governance, Information security or related field
• Familiarity with data governance, risk management, and IT security practices.
• Experience of working on large technology projects
• Excellent communication and stakeholder management skills.
• Strong knowledge of GDPR, DPDPA, CCPA/CPRA, and other international privacy

Leadership Competencies:

Functional Competencies