General Manager - Data Protection Officer - Manufacturing Firm

Role: GM, Data Protection Officer.

Company: Listed Manufacturing Company.

Location: Gurgaon, Haryana.

Responsibilities:

Data Protection Compliance:.

- Ensure compliance with data protection laws and regulations, including GDPR, DPDP, CCPA, and other applicable legislation.

- Monitor and interpret changes in data protection laws and communicate their impact to relevant stakeholders.

Policy Development and Implementation:.

- Develop, update, and implement data protection policies and procedures to safeguard personal data.

- Advise and support other departments in integrating data protection requirements into their processes.

Data Mapping and Inventory:.

- Maintain a comprehensive inventory of personal data processing activities within the organization.

- Ensure data mapping and data flow assessments are regularly conducted to identify and mitigate risks.

Privacy Impact Assessments (PIAs):.

- Conduct Privacy Impact Assessments to evaluate and mitigate the privacy risks of new projects, systems, or processes.

- Provide recommendations and guidance to mitigate identified risks.

Data Subject Rights:.

- Build processes for data subject requests, including access, rectification, and erasure, ensuring timely and compliant responses.

- Educate employees on data subjects' rights and responsibilities.

Security and Incident Response:.

- Collaborate with the IT and Security teams to ensure data security measures are implemented effectively.

- Develop and maintain an incident response plan for data breaches, including notification to relevant authorities and affected parties.

Training and Awareness:.

- Organize and deliver data protection and privacy training programs for employees.

- Promote a culture of data protection and privacy awareness across the organization.

Record-Keeping and Reporting:.

- Maintain records of data protection activities, including data processing records, data subject requests, and breach notifications.

- Prepare and submit data protection compliance reports to senior management and relevant authorities as required.

Skills/ Qualifications:.

- Bachelor's degree in law along with a diploma/ degree in relevant IT, data protection, information security, or a related field.

- A master's degree or relevant certifications are a plus.

- 15+ Years of Experience in IT/ Compliance/ Legal and at least 5+ years proven experience in data protection or data privacy roles, with a deep understanding of data protection laws and regulations.