Manager, Data Protection

Responsibilities.

Compliance Management:.

Stay up-to-date with relevant data protection laws and regulations in India and other jurisdictions where we operate..

Ensure our data processing activities comply with applicable laws, including but not limited to the Personal Data Protection Bill (PDPB), GDPR, and other relevant regulations..

Conduct periodic assessments and audits to identify and address compliance risks..

Policy Development.

Collaborate with the legal team to develop and update data protection policies, procedures, and guidelines..

Work with product teams to integrate privacy-by-design principles into the development lifecycle of gaming products and services..

Data Protection Impact Assessments (DPIAs).

Conduct DPIAs to identify and mitigate risks associated with data processing activities, particularly those involving personal data..

Guide product teams on implementing measures to minimize privacy risks..

Training And Awareness.

Develop and deliver data protection training programs for employees, emphasizing the importance of privacy and data security..

Raise awareness of data protection requirements and best practices across the organization..

Incident Response.

Act as the point of contact for data protection incidents and breaches, coordinating response efforts and ensuring timely reporting to relevant authorities and affected individuals..

Work with cross-functional teams to investigate incidents, assess impact, and implement remediation measures..

Vendor Management.

Evaluate the data protection practices of third-party vendors and service providers, ensuring they meet our standards for data security and privacy..

Negotiate and review data protection clauses in contracts and agreements with vendors..

Qualifications.

Bachelor's degree in Law, Information Security, Computer Science, or related field.

An advanced degree or professional certification in data protection (e.g., CIPP/E, CIPM) is a plus..

Proven experience in data protection compliance, preferably in the gaming industry or related technology sector..

Strong understanding of data protection laws and regulations, including PDPB, GDPR, and other global privacy frameworks..

Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams..

Analytical mindset with the ability to assess complex data protection issues and propose practical solutions..

Experience conducting data protection impact assessments and managing data protection incidents..

Familiarity with privacy-by-design principles and their application in product development..

Ability to work independently and manage multiple projects simultaneously..