BIU:Privacy, Compliance, Grievance & Resolution Champion - DPO

Key Responsibilities:

Policy and Documentation

• Creation of privacy policies, strategies, and procedures that align with Axis banks business objectives and regulatory requirements.
• Collaborate with the legal team to develop and update data protection policies, procedures, and guidelines.
• Collaborating with cross-functional teams to support data privacy strategies and ensuring that the policy impacted processes, practices and systems are compliant with the applicable data privacy regulations.

Privacy Impact Assessment

• Conduct and review Data Protection Impact Analysis (DPIAs) to identify and mitigate risks associated with data processing activities, particularly those involving personal data.
• Guide product teams & business teams on implementing measures to minimize privacy risks.
• Document action plans to address identified privacy risks and maintain an up-to-date privacy risk register.

Support DPDPA Tool implementation.

• Work with the tool provider, provide requirements and support UAT and help in troubleshooting of any issue during implementation.
• Provide necessary support for tool implementation & act as an interface between business & tech partner.

Data Subject Rights Management

• Develop workstream for handling Data Subject Rights.
• Monitoring of the Grievance redressal mailbox.
• Ensure Request Facilitation with documentation & Response.
• Validation of Data Subject rights form.
  
• Monitor closure of Data Subject Rights Request.

Vendor Agreement

• Work with the legal team and business team to review third-party contract from purview of applicable privacy legislations.
• Ensure all requirements are covered in the privacy obligations.
• Enable updating of the clauses as per regulatory requirements.

Incident Management

• Act as the point of contact for data protection incidents and breaches, coordinating response efforts and ensuring timely reporting to relevant authorities and affected individuals.
• Ensure collaboration with cross-functional teams to investigate incidents, assess impact, and implement remediation measures.
• Establish aprocedure for ensuring statutory reporting.
• Ensure establishment of responding to data principals in case of Data Breach.

Compliance

• Stay up to date with relevant data protection laws and regulations in India and other jurisdictions where we operate.
• Lead our data processing activities & comply with applicable laws.
• Lead privacy training programs for employees to build a privacy-centric culture and ensure a deep understanding of privacy practices throughout the organization.
• Developing, implementing, and driving organizations privacy projects and strategies and managing privacy compliance programs.
• Support across all stages of implementation including review, preparation, storage and transfer and legal readiness.
• Regularly reviewing and evaluating compliance processes to guarantee best practice across all areas of the organization ensuring appropriate monitoring and auditing processes are effectively implemented.
• Assisting in managing data subject requests, including requests for access, rectification, erasure, and restriction of processing.

• Act as the point of contact for internal and external data protection audits.
• Lead and manage cross-functional meetings to align teams on data privacy objectives and facilitate discussions.
• Exhibit strong presentation skills to convey concepts and initiatives clearly to internal and external stakeholders.

Qualifications & experience

• Graduate / Post Graduate degree in B Tech / Information security / Law / a related field.
• Professional certification: CIPPE / CIPM / CIPT / CDPSE is preferred.
• 3+ for Manager / 5+ years for Senior Manager / 8+ years for AVP - Data Privacy experience in large financial institution / banks / consulting firms
• Experience in developing policy, establishing governance models, and imparting compliance training.
• Experience working in a regulated industry.
• Strong knowledge of multiple privacy regulation like GDPR / PDPO / PDPL / DPDPA etc.
• Experience in conducting DPIAs and managing privacy risks.
• Experience working with privacy management tools such as One Trust, Securiti.ai or similar platforms preferred.
• Exceptional communication and interpersonal skills, with the ability to effectively communicate complex privacy concepts to both technical and non-technical stakeholders.
• Sound understanding of major privacy frameworks and evolving legislation worldwide.
• Demonstrate knowledge and experience in evaluating and implementing privacy enhancement tools (PET) and technologies.
• Knowledge of information technology and data management systems.
• Ability to collaborate with all IT teams on security-related incidents, tasks, and projects.