JOB DESCRIPTION –

Enterprise focused:

Lead and collaborate in the formulation of policies related to collection and processing of personally identifiable information, based on the Privacy & Data Protection Laws of the countries in which the company operates or would like to expand its operations.

Implement and monitor the data privacy policies and associated processes across functions and business units.

Proactively partner with functional groups (HR, CAG, CCD, Facilities,…) to ensure that the adoption of new technologies, processes, services and solutions are compliant with the applicable data privacy regulations

Assess the development & enhancements of internal processes & systems and recommend privacy related controls.

Conduct employee awareness on lawful handling of personally identifiable information, as part of their work.

Identify risks and also plan and implement the risk mitigation plans

Lead the data breach handling process for effective addresal of privacy related gaps (if any) reported, in the current process & systems.

Manage the process related to personal data access requests from individuals.

Assess subcontracting/outsourcing of any processing of personally identifiable information and recommend privacy related controls (including inclusion of appropriate clauses in the vendor contract.

Liaison with external Privacy and Data Protection Counsel for expert views and audits.

Identify and implement internal initiatives on Data Privacy.

Client focused:

Partner with the product development team in the development of new products (including cloud based) and recommend privacy related features/controls, in summary Privacy by Design.

Review and respond to privacy related sections in the RFI/RFQ/MSA from clients and collaborate in the feasibility study of privacy related requirements/clauses of the prospect, in the pre-contract sign-off stage.

Advise the delivery teams regarding implementation of the privacy related requirements.

Conduct employee awareness on lawful handling of personally identifiable information, as part of their work.

Assess subcontracting/outsourcing of any processing of personally identifiable information and recommend privacy related controls (including inclusion of appropriate clauses in the vendor contract.

Conduct internal audits.

Lead the data breach handling process for effective addressal of privacy related gaps if any, in the current process & systems.

CERTIFICATIONS -

Excellent understanding of Delivery operations.
Quick Learner.
Excellent Business Communication.
Privacy Certifications such CIPP (US/EU/IT), DCPLA, DCPP

Knowledge, Skills required for the role

Data Privacy, Data governance, processes, information security, Data Privacy laws & Standards
Experience in Data Privacy matters both as a Data controller and Data Processor
Excellent understanding of Delivery operations.
Quick Learner.
Excellent Business Communication

Infosys

More Information