JUNIOR MANAGEMENT POSITION - DATA PRIVACY & PROTECTION

hrsi; Karachi Division; On-site; PKR 2,000,000 - 3,000,000; Full time

Job summary

hrsi, a Karachi-based EMI regulated by SBP, is seeking a Junior Management professional for Data Privacy & Protection to build and sustain the organisation's privacy framework in line with regulatory and international standards.

The role covers DPIAs, consent management, DSAR handling, vendor risk, breach response, awareness training, and policy enforcement to ensure ongoing compliance across the digital payments ecosystem.

Qualifications

• Minimum 16 years of education, preferably a Bachelor's degree in Information Technology or related field.
• Experience in data privacy, protection, or regulatory compliance is advantageous.
• Understanding of SBP guidelines, GDPR, and PCI DSS is preferred.

Responsibilities

• Establish, implement, and maintain the data privacy and protection framework aligned with SBP, GDPR, and PCI DSS.
• Ensure regulatory reporting and evidence for audits; manage DPIAs for new products and third-party integrations.
• Oversee DSARs, consent management, and data subject rights, ensuring compliant responses.
• Assess third-party data practices and enforce data localization and security clauses.
• Coordinate breach response and regulatory notification within required timeframes.
• Develop privacy awareness and training for employees; monitor policy enforcement.

Education

Bachelor's degree or higher in Information Technology or related field

Job description

Company Overview:

Our client, a Karachi-based, State Bank of Pakistan (SBP) regulated Electronic Money Institution (EMI), seeks to appoint an experienced professional for the following role:

JUNIOR MANAGEMENT POSITION - DATA PRIVACY & PROTECTION

Job Role

The role of Data Privacy & Protection is responsible for establishing, implementing, and maintaining the organization's security, data privacy and protection framework in line with regulatory requirements and international best practices. This role ensures that personal and sensitive data processed within the EMI's digital payment ecosystem is adequately protected, managed, and governed in compliance with applicable regulations (including central bank requirements such as SBP), as well as global standards such as GDPR and PCI DSS.

Key Responsibilities

• Data Privacy Framework & Governance: Establish, implement, and maintain the organization's data privacy and protection framework, policies, and procedures in alignment with applicable regulations (including SBP guidelines), GDPR, PCI DSS, and other relevant standards governing the digital payment ecosystem.
• Regulatory Compliance & Reporting: Ensure continuous compliance with central bank (SBP) requirements, data protection laws, and industry regulations. Manage regulatory reporting, respond to supervisory inquiries, and maintain evidence of compliance for audits and examinations.
• Data Protection Impact Assessments (DPIAs): Conduct DPIAs for new products, systems, and third-party integrations to identify and mitigate privacy risks associated with the processing of personal and sensitive data.
• Consent Management & Data Subject Rights: Oversee the implementation of consent management mechanisms. Manage and respond to data subject access requests (DSARs), including requests for access, rectification, erasure, and data portability, ensuring timely and compliant resolution.
• Third-Party & Vendor Risk Management: Assess and monitor data protection practices of third-party vendors, service providers, and partners handling EMI data. Ensure contractual agreements include necessary data protection clauses and compliance with data localization and security requirements.
• Breach Management & Incident Response: Lead the identification, investigation, and reporting of personal data breaches. Coordinate with internal stakeholders (including security, legal, and IT) to manage incident response, mitigation, and regulatory notification within mandated timeframes.
• Awareness & Training: Develop and deliver data privacy and protection awareness programs for employees, ensuring a culture of compliance and accountability across the organization.
• Policy Enforcement & Monitoring: Continuously monitor data processing activities to ensure adherence to privacy policies. Conduct periodic reviews, audits, and gap analyses to identify areas for improvement and recommend remediation measures.

Education

• Minimum 16 years of education, preferably a Bachelor's degree in Information Technology, or a related field from an HEC-recognized or equivalent foreign institution.

Experience

• Minimum 3-4 years of professional experience, preferably in a large national/multinational organization with at least 1-2 years of related functional experience in a similar role at an equivalent position.
• Experience in a bank, EMI, fintech, or regulated financial institution growth functions is preferred.

Key Requirements

• Collaborative Execution – Experience managing multi-stakeholder campaigns, especially in coordination with external partners and retail-facing brands.
• Team Player– Ability to work in teams or agency partners to deliver high-impact creative and campaign outputs.
• Agility & Entrepreneurial Mindset – Thrives in a fast-paced startup setting, with a bias toward action and innovation.

Age

• The candidate should preferably be not more than 33 years of age as of last date of submission of application.

www.hrs-int.com