Job Description

:BackgroundGovernment of India has introduced Data Privacy and Data Procedures Act (DPDP Act) with a primary purpose of safeguard the privacy of personal data and information about an individual. Under the DPDP Act, customer shall have a right to consent how the data can be used, be aware of how the Bank handles the customer data, right to amend and erase the data etc. Bank has to ensure that it uses the customer data only for to provide the required banking services and for any other use it shall require an explicit consent from the customer.With this objective, the Bank is setting up a Data Protection Office and is looking for bright individuals who have the zest to learn, work in uncharted waters, be able to work with colleagues across levels and across various verticals in the Bank.Job Summary:The Data Privacy Office will lead the development, implementation, and maintenance of the company's data privacy program, ensuring compliance with data protection regulations and industry standards. This role shall report to the Data Protection Officer of the Bank and involves developing and implementing privacy policies, procedures, and training programs to protect sensitive data and maintain customer trust.Job Role: Data Privacy ExpertKey Responsibilities:

• Develop and maintain a comprehensive data privacy program framework including data Privacy Policies, Procedure, Templates & Process documents
• Ensure that the practices in the Bank are in compliance with DPDP Act, GDPR and other applicable regulations.
• Play a consulting role for Business Team on all privacy related queries and to provide advice and guidance on data protection obligations and assist the business to understand privacy laws, best practices, and how to handle personal data appropriately.
• Conduct data privacy risk assessments and implement mitigation strategies.
• Collaborate with cross-functional teams to integrate data privacy into products and services.
• Collaborate with IT and security teams to implement data protection measures, such as encryption and access controls and ensure data privacy by design.
• Perform Privacy Impact Assessment (PIA) as per Banks defined processes
• Develop and deliver data privacy training programs for employees across different level of within the Bank
• Manage data principal (customer) requests, incidents, and breaches. (e.g., access, deletion, opt-out) and respond in a timely manner
• Serve as the point of contact for all data privacy matters.
• Handle the internal / external audits related to data privacy independently
• Stay up-to-date with evolving data privacy laws and regulations and update policies accordingly.

Eligibility:

• 5+ years of experience in data privacy, compliance, or related fields (optional).
• Ability to work collaboratively across departments.
• Strong leadership and project management skills.
• Excellent communication and interpersonal skills.
• Strong analytical and problem-solving skills.
• Engineer / Graduate / Masters
• Ability to interact and getting job done from peers and seniors
• Excellent verbal, written communication & presentation skills
• Certification like DCPLA / DCPP/CIPT/CIPM will be added advantage

Below criteria's for selection can be added for external job posting

• Experience in Data Privacy; Experience in Banking (Preferable)
• Knowledge on Data Privacy Laws / Regulations: DPDPA, GDPR, DIFC, etc.
• In-depth knowledge on Data Privacy Concepts: Privacy Impact Assessment, Personal Information Inventory, Subject Access Request, Notice etc.

Kotak Mahindra Bank