Data Privacy lead

Job description

Yubi, formerly known as CredAvenue, is re-defining global debt markets by freeing the flow of finance between borrowers, lenders, and investors. We are the world's possibility platform for the discovery, investment, fulfillment, and collection of any debt solution. At Yubi, opportunities are plenty and we equip you with tools to seize it. In March 2022, we became India's fastest fintech and most impactful startup to join the unicorn club with a Series B fundraising round of $137 million. In 2020, we began our journey with a vision of transforming and deepening the global institutional debt market through technology. Our two-sided debt marketplace helps institutional and HNI investors find the widest network of corporate borrowers and debt products on one side and helps corporates to discover investors and access debt capital efficiently on the other side. Switching between platforms is easy, which means investors can lend, invest and trade bonds - all in one place. All of our platforms shake up the traditional debt ecosystem and offer new ways of digital finance. Yubi Credit Marketplace - With the largest selection of lenders on one platform, our credit marketplace helps enterprises partner with lenders of their choice for any capital requirements. Yubi Invest - Fixed income securities platform for wealth managers & financial advisors to channel client investments in fixed income Financial Services Platform - Designed for financial institutions to manage co-lending partnerships & asset-based securitization Job title : Data protection and Privacy lead **Overview** : Execute and enhance Group-wide Privacy Program across multiple entities, jurisdictions, and products. Report to Data Protection Officer (DPO) ensuring compliance with DPDPA, GDPR, UAE PDPL, Singapore PDPA, and regional/international privacy regulations. **Key Responsibilities:** - Implement privacy governance frameworks, policies, standards, procedures, and controls - Develop privacy operating models, metrics, dashboards, and management reporting - Conduct Privacy Impact Assessments (PIA), DPIAs, data mapping, ROPA, consent management - Implement Privacy-by-Design across product, engineering, architecture, security, and business teams - Conduct privacy risk assessments and maintain risk registers with mitigation strategies - Lead third-party privacy due diligence and vendor risk management - Manage privacy incidents, breaches, complaints, and regulatory notifications - Design and deliver organization-wide privacy training and awareness programs - Partner with business, product, tech, compliance, legal, and security teams **Qualification:** - Education: Bachelor's in Law, InfoSec, CS, IT, Engineering (Advanced degree preferred) - Certifications: IAPP (CIPP/A, CIPP/E, CIPM, CIPT), DSCI DCDPO, ISO 27001/27701 - Experience: 5-7 years overall; 2+ years in Data Privacy/Protection in FinTech/Banking/NBFC/Tech - Key Skills: Privacy law & regulations, technology systems, cloud environments, data lifecycle management, stakeholder engagement, project management, strong communication - Experience with financial/lending/credit/identity data at scale; multi-entity privacy programs; cross-functional InfoSec, Risk, Compliance, Legal collaboration