Data Protection Officer

Job Purpose

To strengthen and oversee the organization’s information security, data protection, audit readiness, and compliance posture across all entities. The role will be responsible for managing external and internal security audits, driving remediation and governance actions, overseeing third-party audit coordination, and ensuring robust password/data protection controls across the organization.

Key Deliverables

1) Audit Management

• Manage all External, Internal, and Third-Party audits across entities.
• Ensure timely audit readiness, coordination, and closure of observations.

2) Compliance & Governance

• Ensure adherence to information security policies, regulatory requirements, and security standards.
• Maintain audit trackers, compliance dashboards, and governance reporting.

3) Third-Party Security Oversight

• Conduct vendor security assessments and risk reviews.
• Track remediation and compliance status for critical partners/vendors.

4) Data Protection & Security Controls

• Strengthen data protection, DLP, and endpoint security controls.
• Monitor risks related to sensitive information exposure.

5) Password & Access Governance

• Drive password policy compliance and access governance across all entities.
• Support privileged access reviews, MFA adoption, and periodic access recertification.

6) Risk Remediation & Stakeholder Coordination

• Coordinate with IT, business, and audit teams for timely issue resolution.
• Reduce repeat audit observations through sustainable control improvements.

Key Requirements:

1) Education:

• Bachelor’s degree in Engineering, Computer Science, Information Security, or related field.
• Relevant certifications such as CISA, CISM, CISSP, ISO 27001, or CEH preferred.

2) Experience:

• 4–10 years of experience in Information Security, IT Audit, Cybersecurity, or Risk & Compliance.
• Experience in managing audits within BFSI or regulated environments preferred.

3) Information Security Knowledge

• Understanding of cybersecurity frameworks, audit processes, and regulatory expectations.
• Familiarity with DLP, IAM/PAM, endpoint security, and access governance controls.

4) Audit & Compliance Management

• Ability to manage audit lifecycle, compliance tracking, and remediation programs.
• Experience in coordinating with auditors, regulators, and internal stakeholders.