Assistant Manager - Risk Management Office

Role description

A.Position Overview

B.Organizational Relationships

C.Job Dimensions

D.Role Summary

Role Purpose

To manage and mitigate privacy risks arising from vendors, partners, and third-party service providers, ensuring DPDP compliance across the supply chain.

Key Responsibilities

A. Vendor Privacy Risk Management

• Identify vendors processing personal data
• Conduct vendor privacy risk assessments and due diligence
• Classify vendors based on risk levels

B. Contractual & Compliance Tracking

• Ensure Data Processing Agreements and privacy clauses are executed and maintained
• Conducting Data protection Impact assessment for Third party vide and organization vide as required.
• Monitor contractual compliance with DPDP requirements
• Validate alignment of existing contracts and safeguard the organization for any penalties w.r.t DPDP act.

C. Cross-Border Data Transfer Oversight

• Assess and track cross-border data transfers
• Coordinate safeguards with Legal and Governance teams
• Recommend changes to existing contracts and ability to draft addendums in accordance with legal team.

D. Ongoing Monitoring & Reporting

• Maintain vendor risk registers and dashboards
• Coordinate remediation and periodic reassessments
• Support vendor audits and regulatory responses

E.Skills Required

F.Educational Qualifications