Senior Manager- Data Privacy

Job description

Summary: Part of the Legal / Compliance function, responsible for driving global data privacy programs, ensuring regulatory compliance, and embedding privacy-by-design principles across business operations. Plays a critical role in safeguarding personal data, mitigating privacy risks, and aligning legal, technical, and operational requirements. Key Responsibilities: Contractual Review & Negotiation • Review, draft, and negotiate Data Processing Agreements (DPAs), EU SCCs, and UK SCCs in line with regulatory and organizational requirements. • Advise stakeholders on contractual privacy risks and propose mitigation strategies. • Support cross-border data transfer assessments and related documentation. Privacy Regulation Implementation • Lead/support implementation of GDPR-compliant frameworks across business processes. • Conduct gap assessments against GDPR, DPDPA, CCPA, ISO 27701, and other applicable laws. • Recommend remediation actions and ensure closure of compliance gaps. Legal & Regulatory Advisory • Provide expert guidance on privacy laws, including international data transfers. • Monitor global privacy regulations and assess business impact. • Translate regulatory requirements into actionable internal policies and controls. Technical & Security Controls • Collaborate with IT and Information Security teams to ensure appropriate technical and organizational measures (TOMs). • Review privacy-enhancing technologies and secure data practices. • Align legal requirements with operational security measures. Privacy Impact Assessments (PIA/DPIA) • Conduct DPIAs for new systems, processes, and business initiatives. • Identify, assess, and mitigate risks related to personal data processing. Training & Awareness • Deliver privacy training and awareness sessions across functions. • Promote a strong privacy-first culture within the organization. Preferred Skills: • Strong analytical and problem-solving mindset. • Ability to manage multiple projects simultaneously. • Collaboration across legal, IT, security, and business teams. • Excellent communication and stakeholder management skills. • Experience with privacy tools (OneTrust, TrustArc, etc.). Technical & Functional Expertise: • Strong knowledge of GDPR, EU SCCs, UK SCCs, and global privacy laws. • Experience with DPAs, DPIAs, data mapping, and compliance frameworks. • Understanding of technical security controls and risk management principles. • Familiarity with ISO 27701, DPDPA, CCPA, and other global regulations. Certifications (Mandatory): • CIPP/E • CIPM • CIPT Qualifications and Education: • LLB (Bachelors degree in Law) Experience Requirements: • 10–12 years of experience in data privacy, data protection, or regulatory compliance roles. • Demonstrated experience balancing legal, technical, and operational privacy requirements. Preferred Experience: • Experience working in multinational or regulated environments. • Familiarity with global privacy regimes (e.g., PDPA, PIPL). Behavioral Competencies: • Strong problem-solving and analytical skills • Attention to detail and accuracy • Proactive and solution-oriented approach • Ability to work under pressure and manage multiple priorities • Adaptability and continuous learning mindset