Personal Data Manager

SberBank is the largest bank in Russia, Central and Eastern Europe and one of the leading international financial institutions. It is the most valuable Russian brand and the strongest banking brand in the world according to Brand Finance. Our goal is to make SberBank one of the best financial and technology companies in the world. The history of the bank began on November 12, 1841. SberBank nowadays is one of the top 5 largest employers in Russia and has around 210,000 employees.

Responsibilities:

·       identify and evaluate the Branch’s data processing activities and data security practices

·       keep a Record of Processing Activities (RоPA) and a Data Map of Branch’s data processing activities

·       perform audits and alter the procedures and documents to comply with applicable laws and regulations

·       implement privacy requirements in Branch’s processing activities according to applicable laws and HQ requirements

·       act as point of contact with Data Fiduciary, supervisory authorities and internal teams

·       draft and review Branch’s Agreements related to Personal Data processing (DTA; DPA; SCC; SLA’s; etc.), conduct Data Protection Impact Assessments (DPIAs) when needed

Requirements:

·       experience in personal data processing organization for at least five years in the bank experience in writing methodology, presentations

·       deep knowledge of Digital Personal Data Protection Act 2023 and ther regulatory legal acts on PD processing

·       ability to build processes, work with ARIS (preferably)

·       knowledge of information security (main types of threats, information leakage channels, methods of protection against threats of violation of confidentiality, integrity and accessibility information)

·       higher education (law, information security)

Conditions:

• Stable competitive salary and benefits
• State-of-the-art office, New Delhi
• Corporate training