Description :

Role Overview :

As an AM/DM - Data Security and Privacy, you will be at the forefront of safeguarding our organization's and our customers' sensitive data.

Your day-to-day will involve implementing, monitoring, and improving our data security and privacy programs, ensuring compliance with relevant regulations, and proactively identifying and mitigating potential risks.

You will collaborate closely with various internal teams, including IT, Legal, Compliance, and Engineering, as well as external stakeholders, to foster a culture of data protection. Your work will directly impact the trust our customers place in us and contribute to the overall success and sustainability of our business.

Key Responsibilities :

- Develop and implement data security and privacy policies, standards, and procedures to protect sensitive information and ensure compliance with applicable laws and regulations (e.g., GDPR, CCPA, Indian Data Protection Bill).

- Conduct regular risk assessments and vulnerability scans to identify potential security gaps and privacy risks, and recommend appropriate mitigation strategies for the organization.

- Monitor and analyze security incidents and data breaches, and lead incident response efforts to minimize impact and prevent future occurrences.

- Collaborate with IT and Engineering teams to implement and maintain security controls, such as access controls, encryption, and data loss prevention (DLP) systems, to protect data at rest and in transit.

- Provide training and awareness programs to employees on data security and privacy best practices to foster a culture of data protection across the organization.

- Manage and respond to data subject requests (e.g., access, rectification, erasure) in a timely and compliant manner.

- Stay up-to-date on emerging data security and privacy threats, technologies, and regulations, and proactively recommend improvements to our security and privacy programs.

- Conduct vendor risk assessments to ensure that third-party service providers meet our data security and privacy requirements.

Required Skillset :

- Demonstrated ability to develop and implement data security and privacy policies and procedures, ensuring compliance with relevant regulations.

- Proven ability to conduct risk assessments, identify vulnerabilities, and recommend mitigation strategies.

- Strong understanding of data security technologies and best practices, including access controls, encryption, and data loss prevention.

- Excellent communication and interpersonal skills, with the ability to effectively communicate complex technical concepts to both technical and non-technical audiences.

- Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications such as CISSP, CISM, or CIPP are a plus.

- Adaptability to work in a fast-paced, dynamic environment, with the ability to prioritize tasks and manage multiple projects simultaneously.