Data Protection Manager

Paytm

8-10 Years | Noida, Uttar Pradesh, India (On Site) | Full Time | 7 months ago
Apply Now

Job Summary

We are seeking an experienced Data Protection and Privacy Manager to oversee the organization's data protection strategy and ensure compliance with Indian laws like the Information Technology Act, 2000, and the Personal Data Protection Bill. The role involves working closely with the Data Protection Officer and regulatory authorities to ensure secure and ethical processing of sensitive data. Key responsibilities include ensuring legal compliance with data protection laws, developing and implementing policies, managing data breaches, conducting employee training, performing Data Protection Impact Assessments, handling data principal grievances, maintaining records of processing activities, and liaising with regulatory agencies and stakeholders.

Must Have

  • Bachelor's degree in Information Security, Computer Science, or Law
  • Mandatory Data Protection or Privacy Management Certification (e.g., CIPM, CDPSE)
  • 8-10 years of experience in security management
  • Strong understanding of IT infrastructure and data security best practices
  • Excellent communication, interpersonal, analytical, and leadership skills

Good to Have

  • Familiarity with regulatory requirements (e.g., RBI, SEBI)
  • Knowledge of emerging technologies and their impact on data protection

Job Description

Role Overview:
We are seeking an experienced Data Protection and Privacy Manager, who will be responsible
for overseeing the organization's data protection strategy and ensuring compliance with Indian
laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill.The
DPPM will work closely with DPO and regulatory authorities to ensure that sensitive data is
processed securely and ethically. This role is crucial in safeguarding our digital assets and
maintaining compliance with industry standards and law.

Key Responsibilities:
● Legal Compliance: Ensure adherence to data protection laws, including local DPDPA,
IT Act and international regulations like GDPR.
● Policy Development: Formulate and implement data protection policies and guidelines
across the organization.
● Data Breach Management: Investigate and report data breaches to relevant authorities
within the stipulated timeframe.
● Training & Awareness: Conduct training sessions for employees on data protection
practices and raise awareness about privacy policies.
● Impact Assessments: Perform Data Protection Impact Assessments (DPIA) to identify
risks and recommend mitigation strategies.
● Grievance Redressal: Act as the point of contact for data principals (individuals) for
grievances related to data handling or privacy violations.
● Recordkeeping: Maintain records of all data processing activities and policies for audit
and regulatory purposes.
● Liaison:With regulatory agencies and stakeholders regarding data protection matters.

Qualifications and Experience:
1. Bachelor's degree in Information Security, Computer Science, and Law.
2. Certification in Data Protection or Privacy Management is mandatory, like - CIPM,
CDPSE, DCPLA, DCPP and DCDPO
3. 8-10 years of experience in security management.
4. Strong understanding of IT infrastructure , data security best practices, and frameworks.
5. Familiarity with regulatory requirements and compliance standards (e.g., RBI, SEBI).
6. Excellent communication, interpersonal, analytical and leadership skills.
7. Knowledge of emerging technologies, their impact on data protection and ability to
handle sensitive information discreetly.

4 Skills Required For This Role

Team Management Legal Compliance Communication Data Analytics