Vice President DPO

SBI Card; Gurugram District; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

SBI Card is seeking a Data Protection Leader responsible for safeguarding personal data across staff, customers, and partners in line with applicable privacy laws and standards. You will act as the primary liaison with data protection authorities and drive privacy governance across the organization.

You will oversee audits, trainings, KPI development, and remediation actions, collaborating with IT, business units, and external auditors to embed a robust privacy program.

Qualifications

• Certified privacy professionals or equivalent certifications are required.
• Experience in conducting awareness sessions and technical training.
• Experience dealing with diverse business and external stakeholders.
• Experience with IT programming or infrastructure and related security standards.
• Experience performing information systems audits, attestation audits and risk assessments.
• Knowledge to assess, develop and implement a privacy program including policies and procedures.

Responsibilities

• Lead and oversee SBI Card’s Data Protection program and related initiatives.
• Manage and monitor compliance with data privacy laws, regulations and standards.
• Perform DPIAs and regular compliance assessments and reporting.
• Coordinate with business, IT, vendors and auditors to ensure adherence to data protection laws.
• Provide security awareness training for employees and contractors.
• Develop KPIs and metrics to evaluate privacy controls and remediation actions.

Skills

Stakeholder Management

Process Orientation

Education

Graduate in IT/Computer Science or equivalent

Tools

CIPM

CIPP

CDPSE

CISSP

ISO 12001

DSCI Privacy Professional

ISO 10012:2017

Job description

Role Purpose: Responsible for ensuring that organization processes the personal data of its staff, customers, providers or any other individuals (also referred to as data subjects) in compliance with the applicable data protection rules. The role is also responsible for acting as the main point of contact between the company and the relevant data protection authorities.

Role Accountability:

• Lead and oversee SBI Card’s Data Protection program and related initiatives.
• Manage and monitors compliance with all applicable Data privacy laws, regulations, and standards including ISO 10012:2017, GDPR, India Data Privacy Bill etc.
• Perform regular compliance assessments and reporting, i.e. Data Privacy Impact Assessment (DPIA).
• Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable Data protection law, regulations and standards.
• Provide periodic and ad hoc security awareness training for employees/contractors to increase Data Protection awareness pertaining to their job functions and evaluate training effectiveness.
• Recommend and develops KPIs and metrics to evaluate the Data protection / Privacy program and related controls.
• Participate in planning, scheduling and preliminary analysis for all internal and external Data Protection / Privacy audits and assessments and maintain list of outstanding audit actions and works with the remediation team to remediate identified gaps. Oversee process documentation and compliance adherence.

Measures of Success:

• Timely implementation of data privacy programs at org level
• Completion of privacy impact assessments as per schedule
• Timely reporting of data privacy incident both internally and to the regulator as per the mandate
• Timely updation and board approval for data privacy policy
• No adverse observations in internal/external audits
• Timely completion of data privacy trainings for all eligible users
• Timely remediation of any findings or recommendations made by any of the internal or external assessors as part of privacy impact assessment
• Adherence to data privacy policy within the organization and process adherence as per MOU.

Technical Skills / Experience / Certifications:

• Certified Information Privacy Professional (CIPP), Certified Data Privacy Solutions Engineer(CDPSE) ,Certified Information Privacy Manager (CIPM), ISO12001, DSCI Certified Privacy Professional, ISO 10012: 2017, CISSP, or any other equivalent certification
• Experience in technical training and in conducting awareness sessions
• Experience in dealing successfully with different business and external stakeholders
• Experience working with IT programming or infrastructure, including certification in information security standards
• Experience in performing audits of information systems, attestation audits and risk assessments
• Knowledge on how to assess, develop and implement Data Privacy program including drafting of privacy policies, standards, processes, procedures and technology provisions etc.

Competencies critical to the role:

• Stakeholder Management
• Process Orientation

Qualification: Graduate in IT/Computer Science or equivalent