Kotak Mahindra Bank Looking For Deputy Vice President – Data Privacy at Mumbai Metropolitan Region Full Time

Government of India has introduced Data Privacy and Data Procedures Act (DPDP Act) with a primary purpose of safeguard the privacy of personal data and information about an individual. Under the DPDP Act, customer shall have a right to consent how the data can be used, be aware of how the Bank handles the customer data, right to amend and erase the data etc. Bank has to ensure that it uses the customer data only for to provide the required banking services and for any other use it shall require an explicit consent from the customer.

With this objective, the Bank is setting up a Data Protection Office and is looking for bright individuals who have the zest to learn, work in uncharted waters, be able to work with colleagues across levels and across various verticals in the Bank.

Job Summary:

The Data Privacy Office will lead the development, implementation, and maintenance of the company’s data privacy program, ensuring compliance with data protection regulations and industry standards. This role shall report to the Data Protection Officer of the Bank and involves developing and implementing privacy policies, procedures, and training programs to protect sensitive data and maintain customer trust.

Job Role: Data Privacy Expert

Key Responsibilities:

1. Develop and maintain a comprehensive data privacy program framework including data Privacy Policies, Procedure, Templates & Process documents
2. Ensure that the practices in the Bank are in compliance with DPDP Act, GDPR and other applicable regulations.
3. Play a consulting role for Business Team on all privacy related queries and to provide advice and guidance on data protection obligations and assist the business to understand privacy laws, best practices, and how to handle personal data appropriately.
4. Conduct data privacy risk assessments and implement mitigation strategies.
5. Collaborate with cross-functional teams to integrate data privacy into products and services.
6. Collaborate with IT and security teams to implement data protection measures, such as encryption and access controls and ensure data privacy by design.
7. Perform Privacy Impact Assessment (PIA) as per Banks defined processes
8. Develop and deliver data privacy training programs for employees across different level of within the Bank
9. Manage data principal (customer) requests, incidents, and breaches. (e.g., access, deletion, opt-out) and respond in a timely manner
10. Serve as the point of contact for all data privacy matters.
11. Handle the internal / external audits related to data privacy independently
12. Stay up-to-date with evolving data privacy laws and regulations and update policies accordingly

Eligibility:

• Overall experience of 10+ years and 5+ years of experience in data privacy
• Ability to work collaboratively across departments.
• Strong leadership and project management skills.
• Strong analytical and problem-solving skills.
• Engineer / Graduate / Masters with an ability to interact and getting job done from peers and seniors
• Excellent verbal, written communication & presentation skills
• Certification like DCPLA / DCPP/CIPT/CIPM will be added advantage
• Experience in Data Privacy; Experience in Banking (Preferable)
• Knowledge on Data Privacy Laws / Regulations: DPDPA, GDPR, DIFC, etc.
• In-depth knowledge on Data Privacy Concepts: Privacy Impact Assessment, Personal Information Inventory, Subject Access Request, Notice etc.