Paytm

Role Overview:

We are seeking an experienced Data Protection and Privacy Manager, who will be responsible

for overseeing the organization's data protection strategy and ensuring compliance with Indian

laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill.The

DPPM will work closely with DPO and regulatory authorities to ensure that sensitive data is

processed securely and ethically. This role is crucial in safeguarding our digital assets and

maintaining compliance with industry standards and law.

Key Responsibilities:

• Legal Compliance: Ensure adherence to data protection laws, including local DPDPA,

IT Act and international regulations like GDPR.

• Policy Development: Formulate and implement data protection policies and guidelines

across the organization.

• Data Breach Management: Investigate and report data breaches to relevant authorities

within the stipulated timeframe.

• Training & Awareness: Conduct training sessions for employees on data protection

practices and raise awareness about privacy policies.

• Impact Assessments: Perform Data Protection Impact Assessments (DPIA) to identify

risks and recommend mitigation strategies.

• Grievance Redressal: Act as the point of contact for data principals (individuals) for

grievances related to data handling or privacy violations.

• Recordkeeping: Maintain records of all data processing activities and policies for audit

and regulatory purposes.

• Liaison:With regulatory agencies and stakeholders regarding data protection matters.

Qualifications and Experience:

1. Bachelor's degree in Information Security, Computer Science, and Law.

2. Certification in Data Protection or Privacy Management is mandatory, like - CIPM,

CDPSE, DCPLA, DCPP and DCDPO

3. 8-10 years of experience in security management.

4. Strong understanding of IT infrastructure , data security best practices, and frameworks.

5. Familiarity with regulatory requirements and compliance standards (e.g., RBI, SEBI).

6. Excellent communication, interpersonal, analytical and leadership skills.

7. Knowledge of emerging technologies, their impact on data protection and ability to

handle sensitive information discreetly.