Senior Manager- Data Privacy

Job description

**Summary:** Part of the Legal / Compliance function, responsible for driving global data privacy programs, ensuring regulatory compliance, and embedding privacy-by-design principles across business operations. Plays a critical role in safeguarding personal data, mitigating privacy risks, and aligning legal, technical, and operational requirements. **Key Responsibilities:** **Contractual Review & Negotiation** - Review, draft, and negotiate Data Processing Agreements (DPAs), EU SCCs, and UK SCCs in line with regulatory and organizational requirements. - Advise stakeholders on contractual privacy risks and propose mitigation strategies. - Support cross-border data transfer assessments and related documentation. **Privacy Regulation Implementation** - Lead/support implementation of GDPR-compliant frameworks across business processes. - Conduct gap assessments against GDPR, DPDPA, CCPA, ISO 27701, and other applicable laws. - Recommend remediation actions and ensure closure of compliance gaps. **Legal & Regulatory Advisory** - Provide expert guidance on privacy laws, including international data transfers. - Monitor global privacy regulations and assess business impact. - Translate regulatory requirements into actionable internal policies and controls. **Technical & Security Controls** - Collaborate with IT and Information Security teams to ensure appropriate technical and organizational measures (TOMs). - Review privacy-enhancing technologies and secure data practices. - Align legal requirements with operational security measures. **Privacy Impact Assessments (PIA/DPIA)** - Conduct DPIAs for new systems, processes, and business initiatives. - Identify, assess, and mitigate risks related to personal data processing. **Training & Awareness** - Deliver privacy training and awareness sessions across functions. - Promote a strong privacy-first culture within the organization. **Preferred Skills:** - Strong analytical and problem-solving mindset. - Ability to manage multiple projects simultaneously. - Collaboration across legal, IT, security, and business teams. - Excellent communication and stakeholder management skills. - Experience with privacy tools (OneTrust, TrustArc, etc.). **Technical & Functional Expertise:** - Strong knowledge of GDPR, EU SCCs, UK SCCs, and global privacy laws. - Experience with DPAs, DPIAs, data mapping, and compliance frameworks. - Understanding of technical security controls and risk management principles. - Familiarity with ISO 27701, DPDPA, CCPA, and other global regulations. **Certifications (Mandatory):** - CIPP/E - CIPM - CIPT **Qualifications and Education:** - LLB (Bachelors degree in Law) **Experience Requirements:** - 10–12 years of experience in data privacy, data protection, or regulatory compliance roles. - Demonstrated experience balancing legal, technical, and operational privacy requirements. **Preferred Experience:** - Experience working in multinational or regulated environments. - Familiarity with global privacy regimes (e.g., PDPA, PIPL). **Behavioral Competencies:** - Strong problem-solving and analytical skills - Attention to detail and accuracy - Proactive and solution-oriented approach - Ability to work under pressure and manage multiple priorities - Adaptability and continuous learning mindset