Data Protection & Privacy Officer

The DPO acts as the central authority for privacy governance, balancing legal, operational, and technical controls across departments to safeguard customer and employee data. (Operational & Technical – focused on data protection, security, and governance)

Key Responsibilities

1. Governance & Oversight

• Own and maintain the company-wide data privacy and protection framework.
• Serve as the primary liaison between internal teams, auditors, and regulators on all privacy-related matters.
• Develop, implement, and maintain privacy and security policies in alignment with ISO 27001, NCA ECC / CCC, and PDPL standards.
• Work closely with Product & Engineering to ensure privacy and security by design are embedded into all products and workflows.
• Track data flows across SaaS infrastructure, including cloud hosting, backups, and third-party integrations.
• Define and enforce policies on data handling, sharing, and lifecycle management across all departments.
• Maintain a data inventory, ensuring proper classification, access control, and retention practices.
• Act as the point of contact for data subject rights requests (DSRs), including access, correction, and deletion requests.

2. Access Control & Data Handling

3. Third-Party Compliance

4. Training & Awareness

5. Continuous Improvement

Requirements

Qualifications & Skills :