Deputy Manager

We're Hiring for Data Privacy - Risk and Compliance in HCLTech

Location: Chennai/Noida

Education: BE/B.Tech / BCA/BSc

Experience: 5+ Years

No of position - 1

Key Responsibilities:

1. Privacy Assessments & Compliance

• Conduct Privacy Risk Assessments (PRAs), Privacy Impact Assessments and Data Protection Impact Assessments (PIAs/DPIAs), and Privacy by Design reviews.
• Evaluate new and changes to applications, business processes, AI solutions, automation initiatives, and third-party services to identify and assess privacy risks.
• Review data flows, data collection practices, processing activities, retention requirements, and data sharing arrangements.
• Identify privacy compliance gaps and recommend appropriate remediation measures.
• Assess adherence to core privacy principles, including lawful basis, purpose limitation, data minimization, retention, and transparency.
• Support compliance with GDPR, DPDP Act, CCPA, and other applicable global data protection regulations.

1. Privacy Governance & Operations

• Maintain and periodically update Records of Processing Activities (ROPA).
• Support implementation and ongoing monitoring of privacy controls and governance requirements.
• Administer privacy assessment repositories, risk registers, and compliance documentation.
• Monitor privacy risks, issues, and remediation actions through formal closure.
• Support the development and maintenance of privacy policies, standards, procedures, and guidance documents.

1. Third-Party & Customer Privacy Reviews

• Review privacy-related contractual provisions, Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and customer-specific contractual requirements.
• Conduct Transfer Impact Assessments (TIAs) and reviews of cross-border data transfer arrangements.
• Support responses to customer privacy questionnaires, requests for proposals (RFP), audits, and due diligence activities.

1. Incident & Regulatory Support

• Participate in the assessment and management of privacy incidents and potential personal data breaches.
• Coordinate investigations in collaboration with Security, Risk, and relevant Business teams.
• Monitor corrective and preventive actions arising from privacy incidents through to closure.
• Provide support in responding to regulatory inquiries and conducting compliance reviews.

1. Stakeholder Engagement

• Partner with enterprise and delivery teams to integrate privacy-by-design and privacy-by-default principles into projects.
• Serve as a privacy advisor to business, delivery, and technology teams.
• Develop and deliver privacy awareness and training sessions.
• Provide support for internal and external audits.
• Prepare privacy metrics, dashboards, leadership reports, and management presentations.
• Collaborate with Privacy Champions and data owners to drive privacy compliance initiatives

1. Preferred Certifications :-

CIPP/E, CIPP/US, CIPM, CIPT, I, ISO 27701 Lead Implementer, or equivalent privacy certifications