Data Privacy Manager

Yubi, formerly known as CredAvenue, is re-defining global debt markets by freeing the flow of finance between borrowers, lenders, and investors. We are the world's possibility platform for the discovery, investment, fulfillment, and collection of any debt solution. At Yubi, opportunities are plenty and we equip you with tools to seize it.

In March 2022, we became India's fastest fintech and most impactful startup to join the unicorn club with a Series B fundraising round of $137 million.

In 2020, we began our journey with a vision of transforming and deepening the global institutional debt market through technology. Our two-sided debt marketplace helps institutional and HNI investors find the widest network of corporate borrowers and debt products on one side and helps corporates to discover investors and access debt capital efficiently on the other side. Switching between platforms is easy, which means investors can lend, invest and trade bonds - all in one place. All of our platforms shake up the traditional debt ecosystem and offer new ways of digital finance.

So far, we have on-boarded over 17000+ enterprises, 6200+ investors & lenders and have facilitated debt volumes of over INR 1,40,000 crore.

Backed by marquee investors like Insight Partners, B Capital Group, Dragoneer, Sequoia Capital, LightSpeed and Lightrock, we are the only-of-its-kind debt platform globally, revolutionizing the segment.

At Yubi, People are at the core of the business and our most valuable assets. Yubi is constantly growing, with 1000+ like-minded individuals today, who are changing the way people perceive debt. We are a fun bunch who are highly motivated and driven to create a purposeful impact. Come, join the club to be a part of our epic growth story.

Inviting applications for the role of  Data Protection & Privacy Manager

Responsibilities

·       Delivering cybersecurity engagements including development of cybersecurity strategy, cybersecurity governance, risk and compliance activities, development of cybersecurity policies and procedures in line with ISO 27001 and ISO27701

·       Analyze and interpret Privacy-related legislation and regulatory requirements into updates needed for current operational processes

·       Conduct Privacy Impact Assessments (PIAs) of business processes/products/solutions to help identify and mitigate risks across the company and establish Privacy-related due diligence/integration activities with other financial institutions

·       Security governance, risk and compliance

·       Conduct audits of Privacy controls to monitor and measure program effectiveness and compliance

·       Deploying Data leak prevention tools and implementation of endpoint protection.

·       Extensive knowledge in GDPR regulation and its requirements. Supporting and guide our clients in adhering to the complex web of relevant national and international regulations.

·       Establishes, defines, and reports privacy KPIs via scorecard and drive performance in partnership with business, Global Privacy team

·       Use online tools to support/facilitate Incident Management and Data Subject Rights processes

·       Identify topics/areas needed for Privacy awareness and training and partner to implement them

·       Work with all teams with access to data to ensure they comply with data protection requirements their procedures meet our contractual and legal requirements.

·       Familiar with the electronic financial services sector to counsel and assist with data privacy aspects of lending-related matters (such as financial data processing, payment association rules, banking and credit laws, and financial privacy), know-your-customer requirements, and payment aggregation regulations. 

Requirements

Requirements

·       Bachelor’s Degree with Minimum of 8-10 years related experience

·       Security related qualifications such as ISO 27001 LI/LA, ISO27701

·       Highly preferred certification: Certified Information Privacy Professional or Certified Data Privacy Solutions Engineer or GDPR implementation certified.

·       Effective communication with ability to articulate issues to both technical and non-technical stakeholders. 

·       Prior experience of implementing GDPR, Information security, privacy governance, assessment, remediation, policies, procedures, data retention concepts and Data Classification implementation knowledge.

·       Ability to handle audits/assessments and identify non-compliance to established policies

·       Solve complex Privacy problems in a fast-paced environment

·       Have handled responses to RFP/RFI for Privacy and security.

·       Identify non-compliance to Privacy policies and procedures and articulate impact

·       Experience with implementation of online privacy platform

Benefits

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, or age.