Sr Manager, Data Privacy Steward (HR Operations)

Job Summary

We are seeking a highly skilled and detail-oriented professional to lead data privacy and governance initiatives within HR Operations. This role will ensure full compliance with applicable data protection laws (including Indias DPDP Act, 2023), manage vendor contracts from a privacy perspective, and oversee access controls and reporting mechanisms across HR systems. The ideal candidate will be a top-tier B-school graduate with 45 years of experience, strong analytical skills, and excellent communication and presentation abilities.

Role & responsibilities

Key Responsibilities

1. Data Privacy & Compliance

• Implement and monitor HR data privacy policies in line with the Digital Personal Data Protection Act (DPDP), 2023 and global standards like GDPR
• Ensure no employee data is shared with anyone without explicit approval from the Information Security team and Data Privacy Champion.
• Conduct Data Protection Impact Assessments (DPIAs) for new HR systems, processes, or vendor engagements
• Maintain documentation of data processing activities and ensure transparency with employees regarding data usage.

2. Vendor Management & Contractual Oversight

• Coordinate with third-party HR vendors to ensure contractual compliance with data protection laws.
• Review and negotiate Data Processing Agreements (DPAs) to include clauses on confidentiality, breach notification, audit rights, and sub-processor approvals.
• Conduct risk assessments and due diligence on vendors handling personal data.

3. Access Control & Reporting Governance

• Review existing HR reports and dashboards for data access appropriateness; recommend and implement changes to restrict unnecessary access[3].
• Collaborate with IT and HRIS teams to define and enforce role-based access controls and other access models.
• Lead periodic user access reviews and ensure alignment with organizational policies.

4. Data Governance & Quality

• Define and maintain data dictionaries, taxonomies, and metadata standards.
• Conduct regular data audits to ensure accuracy, completeness, and integrity of HR data.
• Resolve data discrepancies and ensure consistency across systems.

5. Stakeholder Engagement & Training

• Act as the privacy liaison between HR, InfoSec, Legal, and external vendors.
• Develop and deliver training programs for HR staff on data privacy and protection protocols.
• Prepare and present privacy compliance reports to senior leadership

Preferred candidate profile

Education

• MBA/PGDM from a top-tier B-school (IIMs, ISB, XLRI, etc.)

Experience

• 45 years of experience in HR operations, data governance, or related fields.
• Prior exposure to data privacy laws, vendor management, and HR systems preferred.

Technical Skills

• Proficiency in Excel, PowerPoint, and data visualization tools.
• Familiarity with HRIS platforms and access control frameworks (RBAC, ABAC).
• Understanding data lifecycle management, data quality, and data protection technologies.

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication.
• Ability to influence cross-functional teams and manage stakeholders.

Preferred Certifications

• Certified Data Privacy Professional (CDPP) or equivalent.
• Certified Information Privacy Manager (CIPM) or Certified Data Steward (CDS).