Creation of privacy policies, strategies, and procedures that align with Axis banks business objectives and regulatory requirements.
Collaborate with the legal team to develop and update data protection policies, procedures, and guidelines.
Collaborating with cross-functional teams to support data privacy strategies and ensuring that the policy impacted processes, practices and systems are compliant with the applicable data privacy regulations.
Privacy Impact Assessment
Conduct and review Data Protection Impact Analysis (DPIAs) to identify and mitigate risks associated with data processing activities, particularly those involving personal data.
Guide product teams & business teams on implementing measures to minimize privacy risks.
Document action plans to address identified privacy risks and maintain an up-to-date privacy risk register.
Support DPDPA Tool implementation.
Work with the tool provider, provide requirements and support UAT and help in troubleshooting of any issue during implementation.
Provide necessary support for tool implementation & act as an interface between business & tech partner.
Data Subject Rights Management
Develop workstream for handling Data Subject Rights.
Monitoring of the Grievance redressal mailbox.
Ensure Request Facilitation with documentation & Response.
Validation of Data Subject rights form.
Monitor closure of Data Subject Rights Request.
Vendor Agreement
Work with the legal team and business team to review third-party contract from purview of applicable privacy legislations.
Ensure all requirements are covered in the privacy obligations.
Enable updating of the clauses as per regulatory requirements.
Incident Management
Act as the point of contact for data protection incidents and breaches, coordinating response efforts and ensuring timely reporting to relevant authorities and affected individuals.
Ensure collaboration with cross-functional teams to investigate incidents, assess impact, and implement remediation measures.
Establish a procedure for ensuring statutory reporting.
Ensure establishment of responding to data principals in case of Data Breach.
Compliance
Stay up to date with relevant data protection laws and regulations in India and other jurisdictions where we operate.
Lead our data processing activities & comply with applicable laws.
Lead privacy training programs for employees to build a privacy-centric culture and ensure a deep understanding of privacy practices throughout the organization.
Developing, implementing, and driving organization's privacy projects and strategies and managing privacy compliance programs.
Support across all stages of implementation including review, preparation, storage and transfer and legal readiness.
Regularly reviewing and evaluating compliance processes to guarantee best practice across all areas of the organization ensuring appropriate monitoring and auditing processes are effectively implemented.
Assisting in managing data subject requests, including requests for access, rectification, erasure, and restriction of processing.
General
Act as the point of contact for internal and external data protection audits.
Lead and manage cross-functional meetings to align teams on data privacy objectives and facilitate discussions.
Exhibit strong presentation skills to convey concepts and initiatives clearly to internal and external stakeholders.
Qualifications & experience
Graduate / Post Graduate degree in B Tech / Information security / Law / a related field.
Professional certification: CIPPE / CIPM / CIPT / CDPSE is preferred.
3+ for Manager / 5+ years for Senior Manager / 8+ years for AVP - Data Privacy experience in large financial institution / banks / consulting firms
Experience in developing policy, establishing governance models, and imparting compliance training.
Experience working in a regulated industry.
Strong knowledge of multiple privacy regulation like GDPR / PDPO / PDPL / DPDPA etc.
Experience in conducting DPIAs and managing privacy risks.
Experience working with privacy management tools such as One Trust, Securiti.ai or similar platforms preferred.
Exceptional communication and interpersonal skills, with the ability to effectively communicate complex privacy concepts to both technical and non-technical stakeholders.
Sound understanding of major privacy frameworks and evolving legislation worldwide.
Demonstrate knowledge and experience in evaluating and implementing privacy enhancement tools (PET) and technologies.
Knowledge of information technology and data management systems.
Ability to collaborate with all IT teams on security-related incidents, tasks, and projects.
Skills:Refer to the About Company:Axis Bank is the third largest private sector bank in India. The Bank offers the entire spectrum of financial services to customer segments covering Large and Mid-Corporates, MSME, Agriculture and Retail Businesses. The Bank has a large footprint of 4,594 domestic branches (including extension counters) with 11,333 ATMs & 5,710 cash recyclers spread across the country as on 31st March, 2021. The Bank has 6 Virtual Centres and has over 1500 Virtual Relationship Managers as on 31st March 2021.The Overseas operations of the Bank are spread over eight international offices with branches at Singapore, Dubai (at DIFC) and Gift City-IBU; representative offices at Dhaka, Dubai, Abu Dhabi, Sharjah and an Overseas subsidiary at London, UK. The international offices focus on Corporate Lending, Trade Finance, Syndication, Investment Banking and Liability Businesses