Vice President - Data Privacy Officer

SBI Card; Gurugram District; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

SBI Card is hiring a Data Protection professional to lead the organization’s privacy program and ensure adherence to global and national data privacy laws. The role collaborates with IT, business units, and external auditors to implement controls and drive privacy awareness across staff.

The ideal candidate will hold privacy certifications (CIPP, CIPM, CDPSE, CISSP) and have hands-on experience in audits, DPIAs, and policy development within a large enterprise environment in India.

Qualifications

• Certifications in data privacy and information security are required or preferred (CIPP, CIPM, CDPSE, CISSP, ISO 10012:2017).
• Experience designing and implementing privacy programs and policies across organizations.
• Experience conducting DPIAs, audits, and regulatory compliance assessments.
• Proven ability to train staff and drive awareness of data protection best practices.
• Experience coordinating with business, IT, vendors, and regulators.

Responsabilités

• Lead and oversee SBI Card's Data Protection program and related initiatives
• Manage and monitor compliance with data privacy laws, regulations, and standards including ISO 10012:2017, GDPR, India Data Privacy Bill, etc.
• Perform regular compliance assessments and reporting (DPIA)
• Collaborate with business, IT, vendors and auditors to ensure adherence to data protection laws and standards
• Provide training for employees/contractors to raise data protection awareness and measure effectiveness
• Develop KPIs and metrics to evaluate the privacy program and controls
• Support audits and remediation actions for identified gaps
• Oversee process documentation and compliance adherence

Connaissances

Stakeholder Management

Data privacy knowledge

Auditing

Training & awareness

Regulatory compliance

Formation

Graduate in IT/CS or equivalent

CIPP

CDPSE

CIPM

ISO 10012:2017

DSCI Privacy Professional

CISSP

Description du poste

Job Description:

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto Make Life Simple inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What's in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
2. Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees
3. Dynamic, Inclusive and Diverse team culture
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to the overall development of an employee through comprehensive learning & development framework

Role Purpose

Responsible for ensuring that organization processes the personal data of its staff, customers, providers or any other individuals (also referred to as data subjects) in compliance with the applicable data protection rules. The role is also responsible for acting as the main point of contact between the company and the relevant data protection authorities.

Role Accountability

1. Lead and oversee SBI Card's Data Protection program and related initiatives
2. Manage and monitors compliance with all applicable Data privacy laws, regulations, and standards including ISO 10012:2017, GDPR, India Data Privacy Bill etc.
3. Perform regular compliance assessments and reporting, i.e. Data Privacy Impact Assessment (DPIA)
4. Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable Data protection law, regulations and standards
5. Provide periodic and ad hoc security awareness training for employees/contractors to increase Data Protection awareness pertaining to their job functions and evaluate training effectiveness
6. Recommend and develops KPIs and metrics to evaluate the Data protection / Privacy program and related controls.
7. Participate in planning, scheduling and preliminary analysis for all internal and external Data Protection / Privacy audits and assessments and maintain list of outstanding audit actions and works with the remediation team to remediate identified gaps
8. Oversee process documentation and compliance adherence

Measures of Success

1. Timely implementation of data privacy programs at org level
2. Completion of privacy impact assessments as per schedule
3. Timely reporting of data privacy incident both internally and to the regulator as per the mandate
4. Timely updation and board approval for data privacy policy
5. No adverse observations in internal/external audits
6. Timely completion of data privacy trainings for all eligible users
7. Timely remediation of any findings or recommendations made by any of the internal or external assessors as part of privacy impact assessment
8. Adherence to data privacy policy within the organization
9. Budget Adherence
10. Process Adherence as per MOU

Technical Skills / Experience / Certifications

1. Certified Information Privacy Professional (CIPP), Certified Data Privacy Solutions Engineer(CDPSE) ,Certified Information Privacy Manager (CIPM), ISO12001, DSCI Certified Privacy Professional, ISO 10012: 2017, CISSP, or any other equivalent certification
2. Experience in technical training and in conducting awareness sessions
3. Experience in dealing successfully with different business and external stakeholders
4. Experience working with IT programming or infrastructure, including certification in information security standards
5. Experience in performing audits of information systems, attestation audits and risk assessments
6. Knowledge on how to assess, develop and implement Data Privacy program including drafting of privacy policies, standards, processes, procedures and technology provisions etc.

Competencies critical to the role

1. Stakeholder Management
2. Market Awareness
3. Influencing Skills
4. Process Orientation
5. Teamwork & Collaboration

Qualification

Graduate in IT/Computer Science or equivalent

Preferred Industry

FSI