Data Privacy

Position: Data Privacy Role
Location: Bengaluru

At Biocon Biologics, we are creating a model for the future of healthcare for all. We are a leading company in the biosimilars revolution where patients come first. Our ambition is to impact a billion lives and we do this by fostering a culture of affordable innovation, patient centricity and disruptive thinking. We are a multicultural global company where employees have a purpose and passion to work closely with partners and patients.

We have proven end to end expertise in the field of biosimilars, from its development, manufacturing, clinical development, regulatory approvals to commercialization. We have a long-term commitment to bring high quality affordable biosimilars to patients all over the globe.

The Data Privacy Manager will be responsible for supporting and strengthening the organization’s data privacy and data protection compliance across India, Emerging Markets, the UK, EU (GDPR) and other global jurisdictions. This is a hands-on individual contributor role, playing a critical part in designing, implementing, monitoring, and continuously improving the organization’s data privacy compliance framework in line with global regulatory requirements.

The role will work closely with Legal, Compliance, IT, Security, and business stakeholders to ensure the highest standards of data privacy governance, risk management, and regulatory compliance.

Key Responsibilities:

Privacy Governance & Advisory

- Act as the single point of contact (SPOC) for all data privacy–related matters, including communication with customers, prospects, and partners through RFPs, emails, questionnaires, and privacy calls.
- Provide privacy advisory support to business and functional teams on data protection obligations, risks, and best practices.
- Assist the AVP – Ethics & Compliance in setting up, managing, and driving the organization’s end‑to‑end data privacy compliance framework.

Regulatory Compliance & Framework Management

- Lead and support privacy compliance assessments, gap analysis, compliance mapping, monitoring, and advisory support across jurisdictions.
- Design, implement, and monitor end‑to‑end data privacy frameworks, including policies, procedures, standards, and controls.
- Remain up to date on applicable central, state, and global data protection laws and regulatory guidance, and translate regulatory changes into practical business actions.

Data Protection Operations

- Develop and maintain data flow maps and maintain a deep understanding of personal data processing activities across the organization.
- Maintain Records of Processing Activities (ROPA) and ensure accuracy and regulatory readiness.
- Conduct and support Data Protection Impact Assessments (DPIAs) and Transfer Impact Assessments (TIAs).
- Manage and advise on cross‑border data transfers, including use of Standard Contractual Clauses (SCCs) and other transfer mechanisms.
- Support the review and negotiation of Data Processing Agreements (DPAs), data sharing agreements, contracts, and other data protection–related documents in close collaboration with the internal legal team.

Stakeholder & Regulatory Engagement

- Collaborate effectively with internal stakeholders across Legal, Compliance, IT, Security, HR, and business teams.
- Interact, as required, with Data Protection Authorities (DPAs), regulators, or government agencies.
- Provide ongoing data privacy training, awareness sessions, and governance support to internal teams.

Monitoring, Metrics & Audit

- Define data privacy compliance metrics and establish systems for tracking and reporting them.
- Perform privacy compliance audits to assess adherence to established protocols and identify areas for improvement.
- Maintain up‑to‑date documentation, policies, and procedures related to data privacy and data protection, and regularly brief stakeholders on best practices and compliance expectations.

Additional Responsibilities

- Support compliance initiatives relating to personal data of customers, employees, and third parties.
- Undertake all other reasonable and related tasks associated with the role, consistent with business and compliance needs.
- Any other project or responsibilities which may be assigned by the reporting manager.

Regulatory Knowledge & Expertise

- Extensive experience and working knowledge of global data protection laws and frameworks, including but not limited to:
- EU GDPR
- DPDPA (India)
- UK DPA 2018
- Standard Contractual Clauses (SCCs)
- Transfer Impact Assessments (TIAs)