Data Privacy Manager

Role: Data Privacy Manager

Location: IBC Knowledge Park, Bengaluru

Reporting to: Head – IT

Team name: Information Technology Department

About the Team and the Role

The Information Technology team at Ather is responsible for designing, implementing, and sustaining Ather’s Data Privacy program across products, platforms, and enterprise functions.

This role is for a dedicated lead who will ensure compliance with applicable privacy regulations, including GDPR and India’s DPDP Act. You will collaborate across Legal, IT, Product, HR, and Engineering teams to operationalize privacy-by-design principles and embed robust data protection practices throughout Ather’s entire ecosystem.

Responsibilities

• Develop and implement Ather’s privacy governance framework, ensuring compliance with GDPR, DPDP Act, and international laws.

• Establish and manage processes for consent management, data retention, data subject rights, and breach management.

• Conduct Data Protection Impact Assessments (DPIAs) and maintain comprehensive data flow maps and records of processing activities (ROPAs).

• Identify privacy risks in new and existing systems and define technical and operational mitigation strategies.

• Partner with Engineering and Product teams to ensure privacy-by-design is embedded into the product development lifecycle.

• Support vendor assessments and third-party reviews to ensure data protection across the supply chain.

• Lead organization-wide privacy training programs to build a privacy-first culture across all business units.

• Track privacy maturity metrics and report performance, risks, and incidents to senior management and regulators.

Experience and Qualifications

• Bachelor’s degree in Law, Information Technology, Computer Science, or related fields.

• Minimum 10 years of total experience, with at least 5 years specifically in data privacy or protection functions.

Must Have Competencies

• Expert knowledge of global privacy regulations including GDPR and India’s DPDP Act.

• Extensive experience in conducting Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs).

• Proficiency in establishing consent management frameworks and handling data subject access requests (DSAR).

• Advanced understanding of data lifecycle management and privacy-by-design principles within IT systems and cloud environments.

Good to have Competencies

• Professional privacy certifications such as CIPP/E, CIPM, or DCPP.

• Proven experience in managing cross-border data transfer requirements and regulatory reporting.

• Familiarity with third-party risk management and vendor data protection assessments.

• Background in responding to privacy-related audits and official regulator inquiries.

Want to know more?

At Ather, we’ve built India’s first intelligent scooter, from scratch. Based on the philosophy of clean design and smart technology, we are transforming the urban commute experience. We are expanding in India, and in the coming years, we look forward to scaling up and launching more products globally. Today, our product offerings include the Ather 450X, 450S, 450 Apex, and Rizta. Beyond the product, we are also setting up an extensive charging network and re-imagining end-to-end ownership experience. To know more, check out our Careers site and our Substack.

Be You, With Us

The Ather story doesn't write itself - our people do. We believe everyone is equal, but not the same. Diversity is our strength, and building an inclusive and equitable workplace begins with acknowledging and embracing our differences. We are an equal opportunity employer, and our team reflects a wide range of identities, experiences, and perspectives - all united by a shared passion to shape the Ather journey.