POSITION OVERVIEW

The Data Privacy Specialist/Manager will be responsible for driving the organizations Data Privacy framework with a primary

focus on compliance with the Digital Personal Data Protection Act (DPDPA). The role requires strong expertise in privacy

regulations, deep understanding of the General Insurance domain, and the ability to manage large cross-functional privacy

projects. The position will support global privacy initiatives and strengthen data governance and information security practices

across the organization.

ROLE AND RESPONSIBILITIES

Lead the implementation and ongoing compliance efforts for DPDPA, including readiness assessments, gap analysis,

remediation plans, and documentation.

Develop and maintain privacy policies, procedures, consent management processes, and data handling standards.

Conduct Data Protection Impact Assessments (DPIAs), data flow mapping, and privacy risk assessments.

Partner with business, IT, Legal, HR, and operations teams to ensure privacy-by-design in processes, products, and

systems.

Support or lead privacy initiatives related to GDPR, CCPA, or other regional/global privacy laws.

Monitor regulatory changes and advise stakeholders on their impact.

Strengthen privacy controls in alignment with IT Governance and Information Security frameworks.

Conduct privacy awareness and training programs for employees and management.

Manage stakeholder communication, project timelines, governance reporting, and audit requirements.

EDUCATION & EXPERIENCE REQUIREMENTS

Graduate/Postgraduate in Information Technology, Law, Management, or related fields.

Minimum 8 years of Project Management experience, preferably in regulatory, governance, or technology-driven

environments.

Strong working experience in the General Insurance domain is mandatory.

Hands-on experience implementing or supporting global privacy regulations such as GDPR/CCPA.

Exposure to IT Governance, Data Governance, or Information Security functions is an advantage.

PREFERRED SKILLS

Strong understanding of DPDPA and global privacy principles.

Certifications such as CIPP/A, CIPP/E, CIPM, or equivalent privacy certifications.

Strong stakeholder management and communication skills.

Ability to conduct impact assessments, manage risk, and design privacy frameworks.

Knowledge of ISO 27001, COBIT, or related governance/security standards (preferred).

Detail-oriented, analytical, and capable of driving cross-functional initiatives independently

Data Privacy Manager