Data Privacy Officer

Job Description: Data Protection Officer (DPO)

Position Summary:
The Data Protection Officer (DPO) will ensure Aster’s compliance with data protection laws, including, DPDP, GDPR, CCPA, and other relevant regulations. The DPO will lead efforts to safeguard personal data, advise on best practices, and act as a point of contact with regulatory authorities and data subjects.

Key Responsibilities

• Compliance and Monitoring

Ensure the organization adheres to data protection laws and internal policies.
Monitor compliance with DPDP, GDPR, CCPA, and other applicable regulations.
Policy Development
Develop, implement, and maintain data protection policies and procedures.
Oversee the creation of privacy notices, consent mechanisms, and data retention policies.

• Training and Awareness

Conduct training programs for employees on data protection and privacy regulations.
Promote awareness of data protection principles across the organization.

• Advisory Role

Advise senior management on data protection obligations and best practices.
Provide guidance on data processing activities, privacy impact assessments, and data-sharing agreements.

• Incident Management

Lead the response to data breaches, including notification to regulators and affected individuals.
Implement corrective actions to prevent future incidents.

• Stakeholder Management

Serve as the main point of contact for data subjects and regulatory authorities.
Collaborate with IT, legal, internal audit and business units to ensure alignment with data protection requirements.

• Data Governance

Maintain records of processing activities (RoPA).
Support the organization's efforts to implement and monitor data governance frameworks.

• Audits

Conduct regular audits and assessments to identify and mitigate risks related to data protection.

Qualifications and Skills

Educational Background

• Bachelors or Masters degree in Law, IT, Business Administration, or related fields.

Professional Experience

• Proven experience as a Data Protection Officer
• Expertise in DPDP, GDPR, CCPA, and other global data protection regulations.
• Technical and Legal Knowledge
• Strong understanding of data protection laws, information security, and risk management.
• Familiarity with IT systems and data security technologies.

Soft Skills

• Excellent communication and stakeholder management skills.
• Strong analytical and problem-solving abilities.
• Ability to handle sensitive and confidential information with integrity.

CERTIFICATIONS
Preferred: CIPP/E, CIPM, CIPT, or other relevant certifications.
Reports To: Head Internal Audit, Risk & Compliance
Location: Bangalore
Employment Type: Full-time