Data Privacy & Protection Lead - DPIAs & Compliance

hrsi; Karachi Division; On-site; PKR 2,000,000 - 3,000,000; Full time

Job summary

hrsi, a Karachi-based EMI regulated by SBP, is seeking a Junior Management professional for Data Privacy & Protection to build and sustain the organisation's privacy framework in line with regulatory and international standards.

The role covers DPIAs, consent management, DSAR handling, vendor risk, breach response, awareness training, and policy enforcement to ensure ongoing compliance across the digital payments ecosystem.

Qualifications

• Minimum 16 years of education, preferably a Bachelor's degree in Information Technology or related field.
• Experience in data privacy, protection, or regulatory compliance is advantageous.
• Understanding of SBP guidelines, GDPR, and PCI DSS is preferred.

Responsibilities

• Establish, implement, and maintain the data privacy and protection framework aligned with SBP, GDPR, and PCI DSS.
• Ensure regulatory reporting and evidence for audits; manage DPIAs for new products and third-party integrations.
• Oversee DSARs, consent management, and data subject rights, ensuring compliant responses.
• Assess third-party data practices and enforce data localization and security clauses.
• Coordinate breach response and regulatory notification within required timeframes.
• Develop privacy awareness and training for employees; monitor policy enforcement.

Education

Bachelor's degree or higher in Information Technology or related field

Job description

hrsi, a Karachi-based EMI regulated by SBP, is seeking a Junior Management professional for Data Privacy & Protection to build and sustain the organisation's privacy framework in line with regulatory and international standards.

The role covers DPIAs, consent management, DSAR handling, vendor risk, breach response, awareness training, and policy enforcement to ensure ongoing compliance across the digital payments ecosystem.