Lead Compliance Engineer

The Role

As the Lead Compliance Engineer (Privacy Specialist), you will be at the forefront of our privacy compliance efforts. Your responsibilities will include conducting privacy impact assessments, advising on data handling practices, and leading audits to ensure adherence to DPDPA, GDPR, and other relevant privacy frameworks. You will work closely with legal, product, engineering, and business teams to embed a "privacy-by-design" and "privacy-by-default" approach throughout the organization. You will also be responsible for creating and refining our privacy manual, policies and processes.

Key Responsibilities

Privacy & Data Protection Expertise :

• Global & Indian Privacy Frameworks : Demonstrate an exceptional level of expertise in DPDPA and GDPR . Apply your deep understanding of these regulations to assess, implement, and maintain a robust privacy program.
• Privacy by Design : Collaborate with product and engineering teams to integrate privacy requirements seamlessly into the software development lifecycle. Ensure that new products and features are designed with privacy in mind from the outset. Review the product designs for privacy compliance in line with DPDP / GDPR. Technical proficiency to map product, tech and privacy correlation and suggest the best way forward.
• Privacy Impact Assessments (PIAs) : Lead and conduct PIAs and Data Protection Impact Assessments (DPIAs) for new projects, products, and data processing activities. Analyze potential privacy risks and recommend effective mitigation strategies.
• Audit and Compliance : Plan, execute, and report on internal and external privacy audits. Identify compliance gaps and deviations, and work with relevant teams to develop and manage remediation plans. Periodically assess the privacy best practices as mandated by regulators and evaluate the implementation of such practices in Razorpay. Work with Public Policy team and regulators to address the privacy requirements and incorporate the best practices within product, policies and operations. Periodically assess the privacy best practices as mandated by regulators and evaluate the implementation of such practices in Razorpay.
• Policy and Process Development : Create, define, and continuously improve privacy-related processes and procedures, including data subject request handling, consent management, and data retention policies.Draft and review Data Sharing Agreements with different parties.

Data Security & Privacy Technology :

Candidate Requirements