Manager Data Privacy Lawyer

About M&G India

We are M&G India, the strategic innovation and digital hub for M&G. Established in 2003, we have offices in Mumbai and Pune.

Our teams work closely with colleagues across the Group worldwide to drive transformation, build digital capability, and support sustainable growth. By leveraging technology, AI, automation, and process excellence, we bring new ways of thinking to improve outcomes for both customers and colleagues.

Grounded in a vibrant culture with strong foundations, we are central to how M&G is transforming as a business.

About M&G

Our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions.

Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.

Through telling it like it is, owning it now, and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.

Accountabilities/Responsibilities

To lead and manage projects end to end including tracking, reporting and managing end to end delivery

To independently review and draft Data Privacy clauses in Internal & Vendor Agreements

To independently assess and create an implementation plan for applicable new data protection regulations

To have an in depth understanding of privacy programs and processes and support the team to streamline operations

To respond to queries and provide appropriate advice to M&G on all aspects of data privacy.

To support policy attestations and Management Reporting relating to Data Privacy

General

To be a motivated self-starter and work collaboratively with colleagues

To take personal accountability to maintain and enhance controls you are responsible for

To cooperate and assist DPO in the fulfilment of their responsibilities, including escalating and seek the advice of the DPO as required

To champion and help embed the Privacy Policy and accompanying standards,

To foster a Privacy culture within M&G plc. - keeping Privacy in the front-of-mind

• Knowledge, Skills, Experience & Educational Qualification
• Essential

• •Able to clearly organize and inform through outstanding written and verbal communication skills.
• •Good working knowledge of Privacy and Data Protection with experience in Contract drafting & negotiation
• •Willingness to self-educate and adopt new business tech solutions.
• •Ability to liaise comfortably with key stakeholders and senior management .
• •Ability to multi-task a high workload effectively cross-functionally, and across geographical boundaries.
• •Ability to conceptualise complex issues and manage and deliver change.
• •Ability to proactively identify & drive through improvements.
• •Good analytical skills in order to identify key themes, suggest solutions and deliver on opportunities.
• •Good stakeholder management skills, with the ability to successfully navigate a complex organisation as well as build strong relationships and work collaboratively with teams across the business.
• •Ability to operate remotely, in a diverse and multi-cultural environment.
• •Broad influencing skills to drive execution with the ability to communicate effectively with stakeholders.
• •The ability to assist with managing and confidential investigations, maintaining confidentiality. Starts to apply sound judgement, using legislative knowledge to advise actions.

Desirable

• •Must hold a privacy certification from IAPP, DSCI etc.
• •Preferred Industry – BFSI/GCC’S
• •Knowledge of OneTrust, Trust Arc or other Privacy Management tools
• •Recent experience of hands-on implementation of data protection or privacy programmes would be an advantage

Qualifications for Assistant Manager

Law Graduate with 3-5 years of relevant experience in Data Protection demonstrating significant application of data protection laws and rules preferably with some prior experience in IT Risk/Operational Risk/Risk Management/Internal Audit.

• •Demonstrates professional knowledge of the EU AI Act, EU data privacy and retention laws and regulation, IT Risk and IT outsourcing responsibilities (according to EU data privacy laws and Luxembourg Circulars 18/698, 22/806, etc.)
• •Very experienced in developing and documenting policies, procedures and in compiling reports
• •Experience of dealing with Data Subject Access Requests, documenting and reviewing RoPAs, DPIAs, etc.
• •Practical knowledge of business risk and control frameworks and how these map to evolving regulatory requirements.
• •Good reporting skills to build, publish and maintain reports and dashboards.
• •Practical knowledge of handling breaches and risk events.
• •Practical knowledge of project management concepts and how to use these to complete and deliver tasks.
• •Must have advanced Excel, PowerPoint, Power BI and MS Word skills.

We have a diverse workforce and an inclusive culture at M&G Global Services, regardless of gender, ethnicity, age, sexual orientation, nationality, disability or long term condition, we are looking to attract, promote and retain exceptional people. We also welcome those who take part in military service and those returning from career breaks.