Data Protection Officer
- RAK Ceramics Pjsc
- 10 - 17 years
- Hyderabad
- 2 days ago
- Email to a friend
- Report this job
Job Description
POSITION OVERVIEW:
The Data Protection Officer (DPO) ensures RAK Ceramics compliance with global data privacy regulations, across various countries, e.g., European GDPR, UAE Data Protection Law, USA data protection rules, Saudi Arabias PDPL, Indias Digital Personal Data Protection (DPDP) Act, Bangladesh data protection rules etc. This role is a central management role for addressing data protection risks and building trust with regional stakeholders.
Reporting to the Head of Information security, the DPO will advise teams, oversee global data privacy programs, handle regulatory communication, and lead compliance audits and staff training. With at least 5 years of experience in this field, the ideal candidate will have a strong understanding of international data laws and the ability to drive a culture of privacy across the organization.
KEY ROLES & RESPONSIBILITIES:
Act as the organizations subject matter expert on data protection and privacy laws across
relevant jurisdictions.
Prepare, draft and implement data processing agreements, policies and frameworks
Ensure full compliance with international and local data protection regulations.
Design and implement data protection policies, frameworks, and controls.
Serve as a liaison with supervisory authorities and stakeholders.
Advocate a company-wide culture of data privacy and accountability
Develop, review, and update the organizations data protection policies and practices in line
with evolving laws.
Monitor and assess compliance with data protection legislation in each country where RAK
Ceramics operates, e.c., the EU (GDPR), USA, UAE, KSA, Bangladesh, India etc.
Conduct regular internal audits and data protection impact assessments (DPIAs).
Collaborate with IT, Legal, HR, and other business units to embed privacy by design into
processes and systems.
Respond to and manage data subject access requests (DSARs), breaches, and complaints
in coordination with legal and technical teams.
Develop and lead training sessions on data protection awareness for staff across regions.
Maintain and update Records Of data Processing Activities (ROPA) as required by
applicable laws.
Act as the primary contact point for data protection authorities and external stakeholders
KEY COMPETENCIES
Data and Risk Management
- Experience of having dealt with regulatory authorities on data privacy matters
- Data classification and handling procedures
- Data retention and disposal schedules
- Personal data inventory and data flow mapping
- Data Protection Impact Assessments (DPIAs)
- Third-party/vendor data processing and contract compliance
- Preparation of Organizational Policies and Practices
- Data Governance and Risk Management
- Data classification and handling procedures
- Data retention and disposal schedules
- Personal data inventory and data flow mapping
- Data Protection Impact Assessments (DPIAs)
- Third-party/vendor data processing and contract compliance
- Organizational Policies and Practices
Information Security & Privacy Policy
- Acceptable Use and Access Control Guidelines
- Data Breach Response Plan and Notification Protocol
- Incident Handling and Reporting Procedures
- Record of Processing Activities (ROPA) documentation
- Employee Awareness and Operational Conduct
Employee data handling and confidentiality guidelines
- Consent collection and processing protocols
- Bring Your Own Device (BYOD) and remote work data usage
- Guidelines for customer service and marketing departments on lawful data use
- Privacy by Design and Default principles integration
Monitoring, Audit, and Reporting
- Internal audit checklists for data protection compliance
- Metrics and KPIs for privacy program effectiveness
- Reporting templates for regulatory authorities
- Guidelines for responding to Data Subject Access Requests (DSARs)
QUALIFICATIONS / EXPERIENCE / SKILLS:
Qualifications:
- Bachelors degree in related field Masters Degree is Ideal.
- Data Protection Laws of various countries like UAE, KSA, EU (GDPR), USA, IN (DPDP) etc.
- ISMS (ISO 27001/NIST)
Experience:
- 10 to 14 years of experience including minimum 5 to 8 years in Data Protection role.
Skills:
- Stakeholder management and Leadership Influence
- Problem-Solving & Critical Thinking
- Proactive & Strategic Thinking
- Communication & Collaboration
- Attention to Detail
- Decision-Making Under Pressure
- Adaptability & Continuous Learning
- Ethical Responsibility
Job Classification
Industry: MiscellaneousFunctional Area / Department: Risk Management & ComplianceRole Category: Risk Management & Compliance - OtherRole: Risk Management & Compliance - OtherEmployement Type: Full timeContact Details:
Company: RAK Ceramics PjscLocation(s): Hyderabad
Keyskills: Data Protection Compliance ROPA Risk Management Audit Data Protection Officer Privacy Policies Data Classification Data Security Vendor Compliance Incident Handling Data Privacy GDPR
Similar positions
RAK Ceramics Pjsc
RAK Ceramics is one of the largest ceramics brands in the world. Specialising in ceramic and gres porcelain wall and floor tiles, tableware, sanitaryware and faucets, the Company has the capacity to produce 118 million square meters of tiles, 5.7 million pieces of sanitaryware, 36 million pieces ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in