Senior Manager- Data Privacy Steward (HR Operations)

1. Data Privacy & Compliance

• Implement and monitor HR data privacy policies in line with the Digital Personal Data Protection Act (DPDP), 2023 and global standards like GDPR
• Ensure no employee data is shared with anyone without explicit approval from the Information Security team and Data Privacy Champion.
• Conduct Data Protection Impact Assessments (DPIAs) for new HR systems, processes, or vendor engagements
• Maintain documentation of data processing activities and ensure transparency with employees regarding data usage.

2. Vendor Management & Contractual Oversight

• Coordinate with third-party HR vendors to ensure contractual compliance with data protection laws.
• Review and negotiate Data Processing Agreements (DPAs) to include clauses on confidentiality, breach notification, audit rights, and sub-processor approvals.
• Conduct risk assessments and due diligence on vendors handling personal data.

3. Access Control & Reporting Governance

• Review existing HR reports and dashboards for data access appropriateness; recommend and implement changes to restrict unnecessary access(3).
• Collaborate with IT and HRIS teams to define and enforce role-based access controls and other access models.
• Lead periodic user access reviews and ensure alignment with organizational policies.

4. Data Governance & Quality

• Define and maintain data dictionaries, taxonomies, and metadata standards.
• Conduct regular data audits to ensure accuracy, completeness, and integrity of HR data.
• Resolve data discrepancies and ensure consistency across systems.

5. Stakeholder Engagement & Training

• Act as the privacy liaison between HR, InfoSec, Legal, and external vendors.
• Develop and deliver training programs for HR staff on data privacy and protection protocols.
• Prepare and present privacy compliance reports to senior leadership.