Data Protection Officer

Job Summary:

ESDS Software Solution Limited is looking for an experienced Data Protection Officer (DPO) to lead and monitor enterprise-wide data privacy governance and compliance. The ideal candidate will have strong knowledge of India's Digital Personal Data Protection Act (DPDP Act, 2023), GDPR, UK GDPR, privacy risk management, and regulatory compliance.

The role involves advising management on privacy obligations, monitoring compliance frameworks, managing privacy risks, supporting data breach response, and promoting privacy by design across business and technology functions.

Key Responsibilities:

- Monitor compliance with the DPDP Act, GDPR, UK GDPR, and other applicable data protection regulations.

- Develop, review, and maintain privacy policies, notices, procedures, and governance frameworks.

- Advise on Data Protection Impact Assessments (DPIAs), privacy risk assessments, and privacy by design.

- Oversee data principal/data subject rights requests, privacy grievances, and regulatory correspondence.

- Support personal data breach assessment, reporting, investigation, remediation, and documentation.

- Review third-party vendor agreements, data processing agreements, and privacy risk assessments.

- Advise on cross-border data transfers and associated privacy safeguards.

- Coordinate with Legal, Information Security, IT, HR, Procurement, and business teams.

- Drive privacy awareness programmes, employee training, audits, and compliance assessments.

- Prepare privacy risk dashboards and periodic reports for senior management and the Board.

- Monitor regulatory developments and recommend updates to policies and controls.

Required Skills:

- Data Protection and Privacy Compliance

- Digital Personal Data Protection Act (DPDP Act, 2023)

- GDPR and UK GDPR

- Data Protection Impact Assessment (DPIA)

- Privacy Governance and Risk Management

- Data Mapping and Records of Processing Activities (RoPA)

- Data Breach Management and Incident Response

- Vendor Risk and Third-Party Data Processing

- Cross-Border Data Transfer Compliance

- Privacy Policy Drafting and Regulatory Liaison

- Audit, Compliance Reporting, and Stakeholder Management

Educational Qualifications:

- Bachelor's degree in Law, IT, Computer Science, Business Administration, Risk, Compliance, or a related discipline.

- Master's degree or specialised qualification in privacy, cyber law, governance, risk, or compliance preferred.

- Certifications such as CIPP/E, CIPM, CIPT, FIP, ISO/IEC 27701 Lead Implementer/Auditor, or equivalent are preferred.

Experience Requirements:

- Minimum 5+ years of experience in data privacy, data protection, legal compliance, risk management, or a related governance function.

- Practical experience supporting GDPR and/or DPDP compliance programmes.

- Experience in DPIAs, privacy policies, data subject rights, breach response, audits, and vendor assessments.

- Strong communication, policy drafting, regulatory interpretation, and senior stakeholder management skills.

Preferred Candidate Profile:

- Candidates with experience in IT services, cloud computing, data centres, technology companies, information security, or enterprise compliance environments will be preferred.

Skills

Data Privacy, Information Security, IT Security, IT Risk Management, IT Compliance