Group Manager - Privacy & Data Protection

Description

Synopsis

Performing Data Protection audits, responding to Delivery and Support function queries on Data Protection compliance, oversee DP KRI exercise, vendor risk and vulnerability assessment in some Americas countries where HCL has a presence.

This position would be based in Lucknow , supporting all central initiatives for Privacy. The resource will work under the guidance of the Americas Privacy Data Protection Office team and will be required to manage the DP compliance lifecycle, prepare dashboards for Senior Management on current state of assessments and process and vendor risk profiles, monitor residual risk for each process on an ongoing / periodic basis

Context

• As part of its DP compliance initiative, the Privacy Office is working closing with the Compliance team and external legal consultants to implement its Privacy Program, which includes reviewing privacy controls for business processes and vendors, and aim to deploy Baseline Privacy Controls, and monitor compliance on an on-going basis
• We need a staff member dedicated to working with all key enterprise stakeholders to ensure proper implementation of the Privacy Program.
• The new data privacy regimes across the Americas (CCPA, Brazil, Argentina) require HCL to have a robust DP compliance programme and ensure risk mitigation plans are in place for such teams and vendors who process personal data / information.
• These laws contain a series of new obligations that require companies to revisit, refresh and create systems and operations for data protection

Roles & Responsibilities

• Liaise with other Risk and Corporate Function teams to ensure HCL enterprise functions and vendors processing personal data / information are assessed for security and resilience w.r.t to their personal data handling processes by that team.
• Perform vendor evaluations for compliance to DP regulations, HCL`s contract with the vendor as well as HCL`s policies and procedures related to personal data processing. Ensure vendor related evaluations are in alignment with the PDPO privacy program
• Attend meetings and respond to queries related to DP compliance, vendors in customer audits and internal R&C Senior Management briefings
• Supporting the respective Geo DPOs in providing specific DP related risk metrics and dashboards.
• Act as the custodian of the DP risk evaluation process and artifacts
• Provide support on behalf of Risk & Compliance during bid defense, due diligence, contract negotiation, assessment, and audit discussions w.r.t to third party risk governance and oversight.
• Utilize legal research platforms to analyze regulatory and compliance issues raised in contract documents and to keep up to date on contract and risk trends.

compliance, data protection compliance, pdpo, cipp, data protection, data privacy, data protection audit, gdpr