Job Title:  Enabling Area Deputy Manager - Data Privacy 1

About the Organisation and the Role

Deloitte is a leader in professional services.  Every day its professionals work to make an impact that matters.  We believe our organisation provides challenges and opportunities that good professionals would like to thrive in.

We have a culture based on values, openness, professionalism.  One of our core values is that we treat each other with respect.  We take pride in an approach that is fair, an environment which is ethical, where meritocracy and excellence matters – whilst being client centric.

Work You Will Do[1]

You will support the Privacy Leader of the Firm in implementing the Firm’s privacy policy, and ensuring the policy and the privacy practices meet with law and regulations including those that the Firm may voluntarily choose to apply.  The responsibilities include those required for implementing and supporting the privacy programme of the Firm such as drafting and review of privacy policies, privacy process review and implementation, reviewing the changes in law and regulation and technology as well as the Firm’s systems whether generally or for service launch/change related reasons, assisting in preparing the Firm for global practice reviews, proactively implementing best-in-class processes, MIS, dashboards, supporting the Firm in dealing with privacy incidents, review of contracts with clients and other counterparts to protect the Firm’s interests.   

You will: (a) develop formats /templates for various policies, processes, as well as other documents (including contracts) as relevant; (b) draft, prepare and/or review policies, processes, contracts as relate to privacy; (c) assist in preparing material (presentations) for workshops & training programs, delivering training programmes; (d) other legal matters.

This role reports into the Privacy Leader and may have additional reporting line(s) where applicable.

The grade / level of the position offered will be based upon the depth and breadth of selected candidate’s experience, qualifications and tenure in data privacy implementation.

How You Will Play Your Role

At Deloitte we have a culture of collaboration and consultation.  We consult the relevant professionals as a matter of course to make sure we have the best inputs to handle a matter.  It’s a “we” culture.  We help and support our colleagues and help each other to win.  You must feel comfortable playing your role in a collaborative and consultative manner and to be challenged in a healthy, intellectual way – keeping in view the objective of achieving the best outcome for the Firm. 

Qualifications

• Graduation or diploma in Science, IT or engineering.
• A degree in law is preferred.
• Certifications such as IAPP, DCPP, ISO 27001:2022 preferred.,
• Working knowledge of data privacy frameworks such as NIST, ISO 27701:2019 is preferred.

Work Experience

• Minimum 4-5 years of post-qualification experience with extensive experience in implementing data privacy processes and practices in large organisations. 
• Experience in drafting and reviewing privacy policies and practices and undertaking privacy impact assessment.
• Good conceptual understanding Digital Personal Data Protection Act, 2023 and other sectoral laws, foreign data protection laws and regulations (e.g., GDPR), their nuances, challenges and risk based solutions to address them.
• Experience with privacy by design concepts and working with client-facing and in-house support teams to integrate privacy compliance into process, systems and people practices.
• Working knowledge of how IT applications, infrastructure and architecture can be adapted to manage and reduce data privacy risk.
• Experience in drafting and reviewing Data Protection and Data Transfer Agreements between EU and non-EU entities.

Skills and Capabilities

• Ability to interact with senior professionals - articulate with clarity and confidence
• Self-motivated, team-player, drive to lead and complete projects in a timely manner in a complex environment.

• Ability to quickly adapt to Deloitte’s culture and way of working, appreciation of business policies and processes while providing implementable privacy solutions.
•   
• Solid analytical (and preferably legal knowledge) and skills, ability to apply these to practical situations, and a solution-oriented, pragmatic approach to balance risk and reward.  The following are important, among others:
  • Risk spotting ability – the candidate must be able to quickly assess the risk areas and recommend ways of mitigating or managing them.
  • Strong analytical skills - should be able to use judgment, analyse facts and draw logical conclusions.
  • Risk mitigation – problem solver attitude, and quick-thinking ability and resourcefulness in finding approaches to manage or mitigate identified risks .

Preferred Location

Mumbai/Bengaluru

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer

employees a broad range of benefits. Learn more about what working at Deloitte can mean for

you.

Our purpose

Deloitte is led by a purpose: To make an impact that matters.

Every day, Deloitte people are making a real impact in the places they live and work. We pride

ourselves on doing not only what is good for clients, but also what is good for our people and the communities in which we live and work—always striving to be an organization that is held up as a role model of quality, integrity, and positive change. Learn more about Deloitte's impact on the world

Recruiter tips

We want job seekers exploring opportunities at Deloitte to feel prepared and confident. To help

you with your interview, we suggest that you do your research: know some background about the organization and the business area you’re applying to. Check out recruiting tips from Deloitte

professionals.

To take the next step and join our progressive and motivated team, please contact [Name] [email].

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms, and their related entities (collectively, the “Deloitte network”). DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”) does not provide services to clients. Please see www.deloitte.com/about for a more detailed description of DTTL and its member firms.  None of the Deloitte network entities shall be responsible for any loss whatsoever sustained by any person who relies on this communication.

This communication is only for the information of the candidate concerned.  Unauthorised distribution or use not permitted.

© 2023 Deloitte Shared Services India LLP.