Hybrid Privacy Manager

at Keywords Studios

• Job title: Privacy Manager
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Pune, India

About the role

• Privacy Manager supporting privacy and AI governance at a leading video games company. Collaborating with teams to implement data protection measures and assess AI risks across projects.

Responsibilities

• Lead the drafting of lower level Data Protection Impact Assessments (DPIAs) and AI impact assessments (AIIAs), including with respect to the implementation of tools / processes, that integrate AI features, and Legitimate Interest Assessments (LIAs) for new projects, identifying risks and proposing pragmatic mitigation steps for senior sign-off. Monitoring progress against the DPIA recommendations and storing evidence of action. This will involve leading calls / meetings with various business stakeholders and presenting on outcomes / recommendations identified.
• Act as the primary lead for fulfilling Data Subject Rights requests, ensuring statutory deadlines and quality standards as met before seeking senior sign-off.
• Maintain a strong understanding of our internal AI governance arrangements and support the business units in following our established policies and procedures.
• Review and refine training materials to keep them engaging and relevant, for both privacy and AI matters.
• Monitor and document minor data incidents, investigating root-causes and ensuring process improvements are introduced to prevent recurrence.
• Proactively create and maintain the Records of Processing Activities (ROPA) by supporting the team to ensure business has a holistic view of data flows.
• Review and support updates of Employee and Customer-facing Privacy Notices to ensure they reflect current processing activities and regulatory requirements.
• Coordinate and complete third-party privacy due diligence and questionnaires for various business functions.
• Support with the privacy inbox and ticketing system by providing timely, accurate, and helpful responses to technical or non-routine queries.
• Provide guidance during the concept and design phases of new projects to ensure Privacy by Design is considered from the outset.
• Work closely with business functions to ensure a consistent approach to data handling and that all privacy changes are clearly communicated.
• Where required, support in conducting internal reviews to check for business compliance with agreed policies.
• Identify gaps in current workflows and make improvements to streamline the department's operations.

Requirements

• Minimum 5 years’ experience working in Privacy Management, with experience working on AI related matters.
• Strong understanding of DPIAs, AIIAs, and other privacy-related risk assessment methodologies.
• Good understanding of legal implications of privacy and AI practices, with a strong understanding of the ethical and regulatory landscape concerning AI, including automated decision making, bias mitigation, and explainability.
• IAPP certification preferable (CIPP/E or CIPP/A) and a comprehensive understanding of GDPR and global privacy frameworks
• Can provide independent support and translate complex regulations into actionable recommendations.
• Strong analytical skills to stay abreast of legislative changes and conduct deep-dive privacy research.
• Proven ability to build relationships and collaborate effectively on cross-functional projects.
• Can communicate fluently in English, both in writing and verbally, with an ability to simplify complex topics.
• Understands business objectives and requirements, ensuring privacy support broader commercial goals.
• Thrives in high-activity, fast-paced environments, with the flexibility to shift between competing priorities and diverse tasks.
• Proficient in the use of Google Workspace and Microsoft Office tools, with an aptitude for learning new privacy management software.
• Understands the need to balance regulatory requirements with operational realities to reach efficient, risk-based decisions that enable business activity.
• Maintains a strong focus on delivery, providing solutions rather than just identifying blockers.
• Ensures high standards of accuracy in all tasks.
• Highly accountable and dependable, capable of driving results independently with minimal oversight while remaining a collaborative team player.
• Committed to continuous professional development and maintaining knowledge of developments in the privacy and AI landscape.