Data Protection Officer

About Servify

Servify is a global platform specializing in product lifecycle management, revolutionizing after-sales service experiences. Established in 2015 in India, Servify links top OEM brands with their sales and service networks to provide flawless customer support globally across Asia, North America, Europe, and the MENA region. The company values diversity and commits to equal opportunity employment without discrimination based on age, disability, gender, sexual orientation, ethnicity, nationality, religion, or belief.

Joining Servify places you in a rapidly expanding international technology firm known for fostering innovation, accountability, and ongoing learning. The company offers competitive pay, employee stock options, flexible policies, modern tools for collaboration, chances for professional growth, and benefits that empower excellence in work.

Role Overview

Servify seeks a Global Data Protection Officer (DPO) and Global Privacy Lead based in India with over seven years of prior quality experience. This individual will be responsible for steering the global privacy and data protection framework, acting as the authoritative figure on data protection governance, regulatory compliance, and privacy architecture across multiple countries, including India, USA, Canada, EU, UK, and Middle Eastern nations.

The DPO will ensure adherence to legal obligations under India's Digital Personal Data Protection Act, 2023, oversee cross-border compliance, manage data subject rights and grievance processes, handle privacy risks and breaches, and continuously enhance privacy maturity. Collaboration with Legal, Technology, Security, Product, HR, and Business teams to embed privacy-by-design and compliance is essential.

Primary Responsibilities

• Direct global privacy initiatives ensuring regulatory compliance throughout Servify's operating regions.
• Serve as the official Data Protection Officer in India and liaise with regulatory bodies as required.
• Offer strategic advice on privacy governance, risk management, regulatory mandates, and data protection to internal units.
• Create, update, and maintain privacy-related policies, standard operating procedures, consent frameworks, data retention, and processing agreements.
• Manage international data transfers involving SCCs, DPIAs, and enforce privacy safeguards.
• Maintain records including RoPA, DSAR logs, privacy audits, and vendor evaluations.
• Lead the entire data subject request and grievance handling process to ensure prompt, secure closure.
• Act as lead contact for privacy audits, regulatory probes, and compliance assessments.
• Oversee response to data breaches and privacy incidents, including investigation, containment, escalation, and necessary notifications.
• Champion Privacy by Design and Privacy by Default in all technological and business developments.
• Evaluate privacy risks in AI/ML and new tech ventures and suggest suitable controls.
• Partner across Technology, Legal, HR, and Operations to integrate privacy measures organization-wide.
• Develop dashboards and reports to monitor compliance status, highlight risks, and track remediation.
• Design and implement data protection training and awareness programs for employees.

Qualifications and Requirements

• Must be a full-time resident of India with availability to support global operations.
• Possess 12 to 18+ years' experience in data privacy, legal/compliance, cyber risk, or related fields, preferably in global tech, SaaS, TPA, consumer finance, or enterprise platforms.
• Fulfill legal and professional criteria to be appointed or registered as a DPO in applicable jurisdictions.
• Demonstrate thorough and current knowledge of global data protection laws, regulations, guidelines, and compliance standards relevant to Servify’s business.
• Have a robust understanding of cloud systems, engineering environments, data localization, encryption, cookie compliance, AI/ML technologies including Large Language Models (LLMs), and emerging AI-related privacy risks.
• Experience with enterprise privacy technology platforms such as OneTrust, Securiti.ai, TrustArc, BigID, or similar solutions is essential.
• Ability to simplify complex privacy and regulatory demands into clear and actionable directions for IT, Security, Audit, Legal, and Business teams.
• Strong communication and stakeholder engagement capabilities to address privacy risks and compliance updates to executives and Boards.
• Hold an LLB/LLM or B.Tech/M.Tech in Computer Science from an accredited institution.
• Possession of at least two recognized privacy or cybersecurity certifications like CIPP/E, CIPP/A, CIPM, CIPT, FIP, CISA, or CDPSE is highly advantageous.