Kotak Mahindra Bank - Data Privacy Officer

Job Summary:

The Data Privacy Office will lead the development, implementation, and maintenance of the company's data privacy program, ensuring compliance with data protection regulations and industry standards. This role shall report to the Data Protection Officer of the Bank and involves developing and implementing privacy policies, procedures, and training programs to protect sensitive data and maintain customer trust.

Job Role: Data Privacy Expert

Key Responsibilities:

1. Develop and maintain a comprehensive data privacy program framework including data Privacy Policies, Procedure, Templates & Process documents

2. Ensure that the practices in the Bank are in compliance with DPDP Act, GDPR and other applicable regulations.

3. Play a consulting role for Business Team on all privacy related queries and to provide advice and guidance on data protection obligations and assist the business to understand privacy laws, best practices, and how to handle personal data appropriately.

4. Conduct data privacy risk assessments and implement mitigation strategies.

5. Collaborate with cross-functional teams to integrate data privacy into products and services.

6. Collaborate with IT and security teams to implement data protection measures, such as encryption and access controls and ensure data privacy by design.

7. Perform Privacy Impact Assessment (PIA) as per Banks defined processes

8. Develop and deliver data privacy training programs for employees across different level of within the Bank

9. Manage data principal (customer) requests, incidents, and breaches. (e.g., access, deletion, opt-out) and respond in a timely manner

10. Serve as the point of contact for all data privacy matters.

11. Handle the internal / external audits related to data privacy independently

12. Stay up-to-date with evolving data privacy laws and regulations and update policies accordingly.

Eligibility:

- Experience in Data Privacy; Experience in Banking (Preferable)

- Knowledge on Data Privacy Laws / Regulations: DPDPA, GDPR, DIFC, etc.

- In-depth knowledge on Data Privacy Concepts: Privacy Impact Assessment, Personal Information Inventory, Subject Access Request, Notice etc

- Strong analytical and problem-solving skills.

- Engineer / Graduate / Masters

- Ability to interact and getting job done from peers and seniors

- Excellent verbal, written communication & presentation skills

- Certification like DCPLA / DCPP/CIPT/CIPM will be added advantage