IN-Manager- Data Privacy -IN-CISO-DPO-Team-IFS - Bengaluru

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

Those in application security at PwC will be responsible for providing security services to development teams including code scanning, readiness testing, and penetration testing to enable application teams to build and deploy secure applications in Production. You will utilise a riskbased methodology and shiftleft approach to engage early in the software development lifecycle.

• Ensure that the PwC staff, its employees and contractors are aware of PwC India Data Protection Policy, best practices on ongoing basis through awareness programs
• To identify, document, test and improve controls to ensure Information Protection across business Lines
• Be the first subject matter expert for enquiries from staff on Data Protection and its requirements, providing them with appropriate advice and guidance.
• Ensure Compliance to Data Protection and Privacy regulations, achieving and monitoring compliance including any remedial measures
• Working closely with IT and Business lines, ensure that the Data Protection and Privacy requirements are part of operational procedures.
• Undertake proactive compliance check activities and implement measures that promote good Data Protection and Privacy working practices and compliance with regulatory requirements.
• Ensure that the principles, e.g. Privacy by design and DP by default is achieved
• Create registers as required by legislation, e.g. the type of personal data that we hold, who processes it and who we share it with.
• Carry out DP audits and spotchecks to monitor compliance.
• Maintain a risk assessment process for personal data including Data Protection Risk Assessments and DP Impact Assessments Ensure that the documentation requirements(DPRA, DIPA) are reviewed and actions taken on the Data Protection related requirements for new Projects, implementations and during third party onboarding
• Review and provide feedback on Data Protection related clauses in the client contracts. Ensure that the third party contracts include appropriate Data Protection clauses during service introduction

• Maintain a risk assessment process for personal data including Data Protection Risk Assessments and DP Impact Assessments Ensure that the documentation requirements(DPRA, DIPA) are reviewed and actions taken on the Data Protection related requirements for new Projects, implementations and during third party onboarding
• Review and provide feedback on Data Protection related clauses in the client contracts. Ensure that the third party contracts include appropriate Data Protection clauses during service introduction
• GDPR
• Experience in conducting Data Protection Risk Assessment /Data Protection Impact Assessments

• Deep Understanding of DPDP Act 2023 and GDPR requirements and its implementation
• Good understanding of computer systems, databases and applications Security. Especially on how personal data is stored and processed