Data Privacy Manager

Job Description:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies.

The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This job is based out of theHead Office of L&T (Powai, Mumbai).

Job Responsibilities:

• Drive the end-to-end DPDP compliance and implementation program across L&T group companies.
• Ensure policies, processes, controls and actionable implementation requirements are rolled out to meet DPDP obligations.
• Coordinate with Business stakeholders for implementation of DPDP rollout.
• Drive implementation of key DPDP requirements including data inventory/ RoPA, privacy notices, consent, Data Principal rights, DPIA, retention/deletion, breach management and third-party privacy compliance.
• Drive selection and rollout of Privacy required to operationalize DPDP compliance.
• Review and challenge vendor deliverables and ensure quality, timelines and regulatory alignment.
• Drive UAT, go-live and implementation of privacy solutions across L&T group companies.
• Monitor changes in DPDP Rules/ regulatory guidance and assess impact on the organization.
• Drive rollout of security safeguards (encryption, masking etc) as per regulatory and business requirements.
• Ensure adequate evidence and documentation is maintained to demonstrate compliance.
• Support internal/ external audits

Skills Required:

1. Sound understanding of DPDP Act, 2023 and applicable Rules.
2. Understanding of privacy principles including data inventory, data flows, consent, Data Principal rights, retention, deletion, PIA, DPIA and breach management.
3. Knowledge of ISO 27001, ISO 27701 and other privacy/ security frameworks.
4. Understanding of Privacy tools and their use in DPDP compliance.

Certifications:

CIPP/A, CIPP/E, CIPM, CIPT, ISO 27701 Lead Auditor/ Implementer are desirable.