Senior Manager - Data Governance Specialist

DPDP Act Implementation & Compliance

• Lead the implementation and ongoing compliance of the Digital Personal Data Protection Act, 2023 across the broking entity and group companies (if applicable).
• Translate DPDP Act requirements into policies, SOPs, controls, and operational workflows.
• Identify applicability as Data Fiduciary / Significant Data Fiduciary (SDF) and support readiness activities accordingly.
• Design and implement Consent Management, Notice Frameworks, and Purpose Limitation mechanisms.
• Ensure lawful handling of personal data, sensitive personal data, and financial data of clients, employees, partners, and vendors.

Data Governance & Privacy Operations

• Establish and maintain Data Governance frameworks including:
  • Data classification and labelling
  • Records of Processing Activities (ROPA)
  • Data retention and deletion schedules
• Implement Privacy by Design & Default principles across applications and digital journeys.
• Oversee Data Principal Rights Management:
  • Access, correction, erasure, grievance redressal, and nomination handling
• Coordinate with IT and product teams for privacy requirements in system development and changes.

Regulatory & SEBI Alignment

• Ensure alignment with SEBI circulars, guidelines, and cybersecurity & data protection mandates applicable to broking firms.
• Support regulatory inspections, audits, and compliance submissions related to data protection and privacy.
• Track regulatory updates and assess impact on business processes and technology platforms.

Risk Management & Assessments

• Conduct and manage:
  • Data Protection Impact Assessments (DPIA)
  • Privacy risk assessments for new products, vendors, and technologies
• Identify data protection risks and recommend mitigation controls.
• Support incident response related to personal data breaches including assessment, documentation, and regulatory reporting.

Vendor & Third-Party Governance

• Assess DPDP compliance posture of vendors, fintech partners, cloud service providers, and other third parties.
• Review and negotiate data protection clauses, DPAs, and contractual privacy obligations.
• Monitor vendor compliance and periodic reassessments.

Awareness, Training & Governance Reporting

• Drive privacy awareness and training programs for employees and stakeholders.
• Prepare dashboards, KPIs, and governance reports for senior management and Board-level committees.
• Support the Data Protection Officer (DPO) or act as a key contributor to the privacy governance office.

Key Skills & Competencies

Mandatory Skills

• Strong understanding of:
  • Digital Personal Data Protection Act, 2023 (India)
  • SEBI regulations applicable to broking firms
• Hands-on experience in privacy compliance implementation, not just advisory.
• Experience in data governance, consent management, and privacy operations.
• Ability to work with technology, security, and business teams.
• Excellent documentation, communication, and stakeholder management skills.

Preferred Skills:

• Knowledge of global privacy laws such as GDPR and ability to map them to DPDP requirements.
• Experience with:
  • Consent Management Platforms (CMPs)
  • GRC tools, data discovery, or privacy automation tools

• Familiarity with ISO/IEC 27701, ISO 27001, or privacy-related frameworks.