Data Privacy Manager

Title : Senior Data Privacy Manager

Location : REMOTE(PAN INDIA)

Duration : 1 Year, CONTRACT

Experience : 12+ Years | Banking / Large Financial Institutions

Department : Information Security – Data Privacy & Protection

Key Responsibilities

Strategy & Governance

Develop, implement, and continuously enhance the Bank’s Data Protection Strategy and Framework.

Support the Head of Data Privacy & Protection in driving organization-wide security objectives.

Ensure policy compliance with a data-driven, risk-based approach.

Data Encryption & Anonymization

Lead enterprise encryption initiatives for data at rest, in transit, and in use.

Design and implement anonymization / masking solutions for PII, PCI, and sensitive data.

Define encryption and key management standards, governance models, and vendor integrations.

Data Loss Prevention (DLP)

Develop and maintain advanced DLP policies, standards, and IR frameworks.

Conduct audits, monitor KPIs / KRIs, and improve secure data-handling practices across the organization.

Coordinate with GSOC, Legal, IT, and Compliance to mitigate data leakage risks.

Data Security Posture Management

Oversee data discovery, data flow mappings, and lifecycle management.

Implement strong key generation, rotation, masking, and encryption protocols.

Drive adoption of security frameworks such as ISO 27001, NIST, PDPL, PCIDSS.

Database Activity Monitoring (DAM)

Manage daily DAM operations, dashboards, incident analysis, and system tuning.

Conduct risk assessments, recommend mitigation actions, and ensure secure DB configurations.

Enterprise Data Protection Programs

Lead initiatives in Insider Risk Management, Data Retention / Deletion, Backup Protection, Data Discovery, and Risk Assessments.

Drive continuous improvement in Data Protection maturity.

Engage with executive leadership, Steering Committees, and regulatory bodies.

Leadership & Collaboration

Coordinate cross-functional cybersecurity programs.

Provide recommendations for investments in data-protection technologies.

Ensure readiness for data breach incidents and lead remediation activities.

Mandatory Skills & Qualifications (Must-Have)

Core Expertise

Proven experience in Data Protection Strategy , Governance , DLP , Data Encryption , Anonymization , Data Security Architecture , and Database Security .

Strong experience in financial services or large enterprise environments.

Professional Certifications (Minimum 2 Required)

CIPPe / CIPM / CIPT

CDPSE

CISA / CISM / CISSP

PCI-QSA

SABSA

Experience

12+ years total experience in cybersecurity, data protection, privacy, or security governance.

Minimum 4 years in compliance, risk, legal, audit, or data protection implementation roles within a large bank or financial institution .

Technical Competencies

DLP technologies (e.g., Symantec, Forcepoint, Microsoft Purview).

Encryption & Key Management solutions (KMS, HSM, Tokenization).

DAM platforms (IBM Guardium / Imperva / others).

ISO 27001, NIST CSF, PCI-DSS, PDPL, Privacy Regulations.

Strong understanding of incident response, root cause analysis, and remediation planning.

What We’re Looking For

A T-shaped data protection leader with both deep technical expertise and wide cross-functional understanding.

Ability to solve complex problems, drive automation, and introduce innovative security solutions.

Strong communication skills for engaging with senior leadership and regulatory bodies.

Demonstrated impact in enhancing data protection posture and reducing enterprise risk.