Manager - Risk Management Office

Role description

JOB DESCRIPTION

A.Position Overview

B.Organizational Relationships

C.Job Dimensions

D.Role Summary

Role Purpose

To own and operationalize DPDP implementation by managing enterprise-wide gap assessments, risk assessments, DPIAs, and remediation tracking.

Key Responsibilities

A. Enterprise Privacy Gap Assessment (Primary Owner)

• Plan and execute organization-wide DPDP gap assessments covering:
• Business processes
• Applications and systems
• Employee and customer data flows
• Vendor and outsourcing arrangements
• Coordinate inputs from Technology, Governance, Vendors, and Business Owners
• Manage and draft Record of processing activities (RoPA)
• Maintain a central privacy risk & gap register
• Define remediation plans, timelines, and owners
• Track closure and report progress

B. Privacy Risk & DPIA Management

• Conduct and maintain:
• Privacy risk assessments
• DPIAs for new products, systems, and changes
• Ensure privacy-by-design is applied operationally

C. Data Principal Rights & Consent Operations

• Establish and manage DPAR workflows
• Track consent and legitimate use documentation
• Maintain audit-ready evidence

D. Metrics, Reporting & Governance

• Develop privacy KPIs, KRIs, and dashboards
• Support internal and external audits

E.Skills Required

F.Educational Qualifications