Lead-Information Security & Data Protection
Confirmed on the employer's own hiring board on Oct 22, 2026. First seen by Alion on Oct 20, 2026.
Regulatory Compliance & Governance
Act as the designated DPO under India's DPDP Act 2023 and other applicable privacy laws.
Maintain a data processing inventory with a documented lawful basis for all activities under the DPDPA Act 2023.
Support the development and maintenance of privacy policies, data retention schedules, and consent management frameworks.
Monitor the Privacy by Design and Privacy by Default into the SDLC and data engineering practices.
Review DPAs, data sharing agreements, and privacy clauses in vendor contracts.
Data Subject Rights & Incident Management
Manage data subject requests - access, correction, erasure, portability, and grievance redressal - within regulatory timelines.
Lead the data breach response: detection, containment, regulatory notification, and post-incident review.
Cyber Security Strategy & Governance
Establish cybersecurity policies, standards, and guidelines based on industry best practices and regulatory frameworks (ISO 27001).
Collaborate with HR and the compliance team to build a cybersecurity-aware culture through regular training and education programmes.
Lead risk assessments to identify potential security threats and vulnerabilities, and propose effective mitigation measures.
Develop and maintain an incident response programme, managing cybersecurity incidents and data breaches from detection to remediation.
Requirements
3+ years of experience in information security, data privacy, or a combined role, preferably in fintech, insurtech, BFSI, or a regulated industry.
Knowledge of India's DPDP Act 2023 and hands-on experience implementing data protection programmes.
Strong working knowledge of ISO 27001.
Proven experience managing security incidents, data breaches, and regulatory notifications.
Excellent communication skills - able to translate complex security and legal concepts for non-technical stakeholders.
Technical degree (B.Tech/M.Tech in CS/IT or MBA in Information Security, or related field).