Team Member-MK211

Kotak Mahindra Bank; Maharashtra; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Kotak Mahindra Bank is seeking a Data Privacy Professional to embed privacy requirements into technology systems, processes, and products. You will work with technology, legal, compliance, and business teams to implement DPDP Act 2023 controls, manage data rights, and ensure secure processing of personal data.

The role focuses on consent management, data minimization, and RoPA/DPIA initiatives while keeping privacy at the design stage across the technology ecosystem.

Qualifications

• 8–10 years of experience in Data Privacy, Technology, Compliance or Information Security.
• Hands-on DPDP A implementation programs or regulatory compliance projects.
• Experience with data mapping, consent management, and privacy risk assessments.

Responsibilities

• Drive DPDP A requirements across business, technology, and operations.
• Coordinate with Technology, Product, Legal, Compliance, Information Security, and Business teams to operationalize DPDP A controls.
• Implement consent management, notice management, purpose limitation, data minimization, retention/deletion, and data principal rights.
• Review architecture, data discovery, RoPA and DPIA initiatives for improvements and operationalization.
• Support processes for handling Data Principal requests, consent withdrawal, grievance redressal, and data breach management; review third-party data processing.
• Track regulatory developments and assist in implementing new privacy requirements and governance frameworks.
• Support privacy audits, regulatory examinations, and management reporting related to DPDP A implementation.

Skills

Privacy by Design

Data mapping

DPDPA compliance

Consent management

Regulatory collaboration

Education

Bachelor's degree in Engineering / CS / IT / IS

8–10 years in InfoSec / Data Governance / Risk Management

Job description

Job Summary:

Responsible for embedding privacy and data protection requirements into technology systems, processes, and products to ensure compliance with applicable data protection laws and regulatory requirements. The role works closely with technology, information security, digital, data, and business teams to implement Privacy by Design, consent management, data principal rights management, data governance controls, and privacy risk assessments across the technology ecosystem. The individual responsible for privacy compliance through technology solutions, monitors privacy controls, supports audits and regulatory requirements, and ensures secure and compliant processing of personal data.

Job Role:

Data Privacy Professional

Reports to:

Data Protection officer (DPO)

Function:

CTO Function

Key Responsibilities:

• Support in driving the implementation of the Digital Personal Data Protection Act, 2023 (DPDPA) requirements across business, technology, and operational functions.
• Collaborate with Technology, Product, Legal, Compliance, Information Security, and Business teams to operationalize DPDPA controls.
• Review and implement requirements related to consent management, notice management, purpose limitation, data minimization, retention/ deletion, and data principal rights.
• Review the current architecture, enterprise-wide data discovery, data mapping, and Record of Processing Activities (RoPA)/ Data Protection Impact Assessments (DPIA) initiatives to suggest improvements and assist in operationalization.
• Support implementation of processes for handling Data Principal requests, consent withdrawal, grievance redressal, and personal data breach management. Review third-party and vendor data processing arrangements to ensure compliance with DPDPA obligations.
• Track regulatory developments and assist in implementing new privacy requirements and governance frameworks.
• Support privacy audits, regulatory examinations, compliance assessments, and management reporting related to DPDPA implementation.

Preferred Experience:

• 8 - 10 years of experience in Data Privacy, Technology, Compliance or Information Security.
• Hands-on experience in DPDPA implementation programs, privacy transformation initiatives, or regulatory compliance projects preferred.
• Experience conducting data mapping exercises, business integration with consent management, privacy risk assessments, and DPRM operationalization.
• Experience working on Data Privacy, Information Security, Data Governance, Technology Risk, Regulatory Compliance, or Digital/Technology Transformation functions, preferably within Banking, Financial Services, FinTech, or other regulated industries.
• Good understanding of banking products, customer journeys, digital banking channels, payments, lending, cards, deposits, and wealth management products.
• Ability to partner effectively with Technology, Product, Information Security, Compliance, Legal, Risk, and Business teams to drive privacy compliance while enabling innovation.

Education:

• Bachelor's degree in engineering, Computer Science, Information Technology, Information Systems, Cyber Security, Data Science, or a related discipline from a recognized university.
• Minimum 4-5 years of experience in Data Privacy, and overall, 8-10 years of experience in Information Security, Data Governance, Risk Management, Technology Compliance, or related domains.

Preferred Certifications:

Professional privacy certifications will be preferred, including:

• CIPM (Certified Information Privacy Manager)
• CIPT (Certified Information Privacy Technologist)
• CIPP/E, CIPP/A, or CIPP/US
• CDPSE (Certified Data Privacy Solutions Engineer)
• Certified Data Protection Officer (CDPO)
• ISO 27701 Privacy Information Management certification