Senior Manager - Risk - Data Privacy - Mumbai - Goregaon E

Tata Capital; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Capital is seeking an experienced data privacy/ governance professional to lead privacy initiatives across its technology landscape in India. You will craft data flow diagrams, RoPA, and work with cross-functional teams to implement privacy tools, ensuring regulatory alignment and robust privacy safeguards.

The role requires 2–5 years in privacy/governance, strong communication, and experience with large technology projects.

Qualifications

• Bachelor’s degree in Engineering, Information Security, Computer Science, or related field.
• Master’s degree in MBA, IT, Information Security or related field.
• 2–5 years of total experience in data privacy/governance, Information security or related field.
• Familiarity with data governance, risk management, and IT security practices.
• Experience of working on large technology projects.
• Excellent communication and stakeholder management skills.
• Strong knowledge of GDPR, DPDPA, CCPA/CPRA, and other international privacy laws.

Responsibilities

• Create and manage data flow diagrams to track personal data across systems.
• Prepare and update RoPA (Records of Processing Activities) per regulatory requirements.
• Work on project for technical integration of privacy tools with TCL and TCHFL systems.
• Collaborate with Business teams to implement privacy tools across Upstream and Downstream systems.
• Provide training and awareness sessions on data privacy tool and integration.
• Advise on technical privacy safeguards like encryption, pseudonymization, access control, and other privacy-enhancing technologies to ensure compliance.
• Review contracts and data processing agreements to align with privacy and regulatory obligations.

Skills

Data privacy governance

IT security practices

Stakeholder management

GDPR knowledge

DPDPA knowledge

CCPA/CPRA knowledge

Communication skills

Project experience

Education

Bachelor’s degree in Engineering/Information Security/CS

Master’s degree in MBA/IT/Information Security

Job description

Job Description:

Main Accountabilities

• Create and manage data flow diagrams to track personal data across systems.
• Prepare and update Records of Processing Activities (RoPA) in line with regulatory requirements.
• Work on Project for technical integration of DPDP tool with systems across TCL and TCHFL
• Work with Business teams to implement privacy tool across all Upstream and Downstream systems
• Provide training and awareness sessions on data privacy tool and integration.
• Design, evaluate, and advise on technical privacy safeguards such as encryption, pseudonymization, access control, and other privacy-enhancing technologies to ensure compliance with global data protection regulations.
• Review contracts and data processing agreements to ensure alignment with privacy and regulatory obligations.

Qualifications & Experience

• Bachelor’s degree in Engineering, Information Security, Computer Science, or related field.
• Master’s degree in MBA, IT, Information Security or related field.
• 2-5 years of total experience in data privacy/governance, Information security or related field
• Familiarity with data governance, risk management, and IT security practices.
• Experience of working on large technology projects
• Excellent communication and stakeholder management skills.
• Strong knowledge of GDPR, DPDPA, CCPA/CPRA, and other international privacy

Leadership Competencies:

Functional Competencies

Requirements: