Sr. Specialist, Data Privacy and Protection

Schneider Electric; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Schneider Electric in Bengaluru seeks a Data Risk and Privacy Lead to implement privacy compliance across the data lifecycle, lead risk mitigation, and ensure regulatory alignment across the organization.

The role emphasizes governance, incident management, DPIAs, vendor privacy reviews, and maintaining processing registers using centralized tools. Strong English communication and cross-functional collaboration are essential.

Qualifications

• Bachelor's degree or equivalent practical experience in information systems, business, data management, cybersecurity, law, or compliance.
• 9–14 years of relevant experience in data governance, privacy, risk management, compliance, audit, or information security.
• Experience supporting documentation, reporting, action tracking, or cross-functional projects.
• Basic understanding of data privacy and information security principles.

Responsibilities

• Guide and monitor regulatory compliance with data protection laws and internal privacy policies.
• Support execution of Data Risk Assurance Framework using approved tools.
• Maintain a local data risk and privacy program aligned to SE standards.
• Track privacy performance using KPIs and maturity assessments.
• Lead privacy incidents and assist investigations with remediation.

Skills

Data privacy

Data protection

Information security

Privacy impact assessments

Vendor privacy reviews

Data subject requests

Data governance

Risk management

Incident management

Education

Bachelor's degree in information systems, business, data management, cybersecurity, law, compliance, or related discipline

Tools

Spreadsheets

Presentations

Collaboration tools

Job description

Job Summary

Role mission The Data Risk and Privacy Lead is responsible for implementing data privacy compliance across their assigned scope and ensuring data security and regulatory compliance by leading risk mitigation strategies, managing incidents, and implementing data risk frameworks across the data lifecycle.

Responsibilities

• Compliance Regulatory Oversight - Guide and monitor operational compliance with data protection laws and internal privacy policies.
• Support execution of the Data Risk Assurance Framework using approved tools and templates.
• Conduct periodic compliance reviews.
• Maintain an up-to-date processing register using central tools and processes.
• Strategy, Governance Reporting - Contextualize and operationalize the SE Data Risk strategy.
• Govern the Data Risk framework across the data lifecycle.
• Design and implement data risk policies and mitigation frameworks.
• Establish and maintain local privacy governance (steerco, action plans, risk reporting).
• Align with the Group Data Protection Office and local and regional regulatory requirements.
• Track and report privacy performance using KPIs and maturity assessments.
• Risk Management Compliance - Anticipate, identify, prioritize, and mitigate data risks.
• Ensure compliance with data controls and regulatory requirements.
• Liaise with the Data Risk Security team on assurance and risk management.
• Data Risk and Privacy Lead Job description Internal Support - Incident Management - Report and document privacy incidents, lead privacy-related aspects of investigations, and lead data incident analysis and mitigation.
• Ensure all incidents follow the Cyber Incident process.
• Promote awareness of breach-handling requirements.
• Maintain a local register of data breaches.
• Program Process Oversight - Develop and deliver a local data risk assurance plan.
• Maintain the processing register using centrally provided tools.
• Support digital asset certification.
• Ensure DPIAs are initiated and reviewed where necessary.
• Ensure vendors complete privacy due diligence and have a signed Data Protection Addendum.
• Monitor overall progress of data risk initiatives.
• Execute manage risk mitigation and control implementation within the Data Office.
• Queries Claims - Act as the contact point for data subjects and manage queries and claims in line with company policy.
• Training Awareness - Promote a strong privacy culture through training and awareness activities.
• Provide guidance to employees on privacy responsibilities and best practices.

Requirements

• Bachelor's degree in information systems, business, data management, cybersecurity, law, compliance, or a related discipline-or equivalent practical experience.
• 9-14 years of relevant experience in data governance, privacy, risk management, compliance, audit, or information security. Internships, academic projects, and rotational assignments may qualify.
• Experience supporting documentation, reporting, action tracking, or cross-functional projects.
• Basic understanding of data privacy, data protection, and information security principles.
• Awareness of privacy regulations relevant to the assigned scope and willingness to learn company policies and regional requirements.
• Foundational understanding of the data lifecycle, including collection, use, sharing, retention, and disposal.
• Ability to support data risk assessments, document controls, maintain risk and processing registers, and track mitigation actions using approved tools and templates.
• Basic awareness of privacy impact assessments, vendor privacy reviews, data subject requests, and incident escalation procedures.
• Proficiency in spreadsheets, presentations, and collaboration tools; ability to prepare clear status reports and basic performance metrics.
• Willingness to learn about the company's privacy and governance platforms. Prior experience with a specific platform should be preferred, not mandatory.
• Strong organization, attention to detail, and follow-through.
• Analytical thinking and the ability to recognize issues, ask questions, and escalte concerns appropriately.
• Clear written and verbal communication, including professional working proficiency in English.
• Ability to collaborate with Data Office, Legal, Privacy, Cybersecurity, IT, and business teams across regions and time zones.
• Sound judgement, discretion, and responsible handling of confidential information.
• Initiative, adaptability, and commitment to continuous learning.

Skills

• data privacy
• data protection
• information security
• privacy impact assessments
• vendor privacy reviews
• data subject requests
• data governance
• risk management
• incident management