Description :

Title : Senior Data Privacy Manager.

Location : REMOTE(PAN INDIA).

Duration : 1 Year, CONTRACT.

Experience : 12+ Years | Banking / Large Financial Institutions.

Department : Information Security - Data Privacy & Protection.

Key Responsibilities :

Strategy & Governance :

- Develop, implement, and continuously enhance the Banks Data Protection Strategy and Framework.

- Support the Head of Data Privacy & Protection in driving organization-wide security objectives.

- Ensure policy compliance with a data-driven, risk-based approach.

Data Encryption & Anonymization :

- Lead enterprise encryption initiatives for data at rest, in transit, and in use.

- Design and implement anonymization/masking solutions for PII, PCI, and sensitive data.

- Define encryption and key management standards, governance models, and vendor integrations.

Data Loss Prevention (DLP) :

- Develop and maintain advanced DLP policies, standards, and IR frameworks.

- Conduct audits, monitor KPIs/KRIs, and improve secure data-handling practices across the organization.

- Coordinate with GSOC, Legal, IT, and Compliance to mitigate data leakage risks.

Data Security Posture Management :

- Oversee data discovery, data flow mappings, and lifecycle management.

- Implement strong key generation, rotation, masking, and encryption protocols.

- Drive adoption of security frameworks such as ISO 27001, NIST, PDPL, PCIDSS.

Database Activity Monitoring (DAM) :

- Manage daily DAM operations, dashboards, incident analysis, and system tuning.

- Conduct risk assessments, recommend mitigation actions, and ensure secure DB configurations.

Enterprise Data Protection Programs :

- Lead initiatives in Insider Risk Management, Data Retention/Deletion, Backup Protection, Data Discovery, and Risk Assessments.

- Drive continuous improvement in Data Protection maturity.

- Engage with executive leadership, Steering Committees, and regulatory bodies.

Leadership & Collaboration :

- Coordinate cross-functional cybersecurity programs.

- Provide recommendations for investments in data-protection technologies.

- Ensure readiness for data breach incidents and lead remediation activities.

Mandatory Skills & Qualifications (Must-Have) :

Core Expertise :

- Proven experience in Data Protection Strategy, Governance, DLP, Data Encryption, Anonymization, Data Security Architecture, and Database Security.

- Strong experience in financial services or large enterprise environments.

Professional Certifications (Minimum 2 Required) :

- CIPPe / CIPM / CIPT.

- CDPSE.

- CISA / CISM / CISSP.

- PCI-QSA.

- SABSA.

Experience :

- 12+ years total experience in cybersecurity, data protection, privacy, or security governance.

- Minimum 4 years in compliance, risk, legal, audit, or data protection implementation roles within a large bank or financial institution.

Technical Competencies :

- DLP technologies (e.g., Symantec, Forcepoint, Microsoft Purview).

- Encryption & Key Management solutions (KMS, HSM, Tokenization).

- DAM platforms (IBM Guardium / Imperva / others).

- ISO 27001, NIST CSF, PCI-DSS, PDPL, Privacy Regulations.

- Strong understanding of incident response, root cause analysis, and remediation planning.

What Were Looking For :

- A T-shaped data protection leader with both deep technical expertise and wide cross-functional understanding.

- Ability to solve complex problems, drive automation, and introduce innovative security solutions.

- Strong communication skills for engaging with senior leadership and regulatory bodies.

- Demonstrated impact in enhancing data protection posture and reducing enterprise risk.