Data Privacy Officer

This is a remote position.

Job Description:

Mastar Limited is hiring a Data Privacy Officer (DPO) on behalf of a fast-scaling, data-driven organization in the FinTech and Healthcare Technology space. This role is critical in ensuring full compliance with global privacy laws (including GDPR, UK DPA, and HIPAA), leading data protection strategies, and acting as the key point of contact for regulatory authorities and internal stakeholders.

Key Responsibilities:

• Lead the company’s data protection and privacy compliance programs.
• Monitor and ensure compliance with GDPR, UK Data Protection Act, HIPAA, and other relevant regulations.
• Conduct Data Protection Impact Assessments (DPIAs) and audits across departments.
• Serve as the primary contact for data subjects, supervisory authorities, and internal teams on privacy-related matters.
• Advise executive leadership on legal risks related to personal data use, data sharing, and retention policies.
• Develop and deliver employee training on data privacy best practices.
• Maintain records of data processing activities (RoPA).
• Collaborate with legal, IT, and security teams to mitigate risk and improve privacy governance.

Requirements

Required Skills:

• In-depth knowledge of GDPR, UK DPA, ePrivacy Regulation, and global privacy frameworks.
• Experience in conducting DPIAs, internal audits, and managing DSARs.
• Strong communication skills with the ability to engage legal and non-legal stakeholders.
• Familiarity with ISO 27001, NIST, or similar security standards.
• Ability to draft and review privacy policies, contractual clauses, and impact assessments.

Desired Skills:

• Certifications such as CIPP/E, CIPM, or equivalent.
• Experience in regulated sectors like FinTech, Healthcare, or Biotechnology.
• Background in legal advisory, compliance, or data ethics.
• Working knowledge of data security tools and access management protocols.

Benefits

Job Benefits:

• Competitive salary & annual performance bonus
• Private medical insurance
• 28 days holiday + public holidays
• Hybrid/flexible work model
• Learning & development budget for certifications (e.g., CIPP/E, CIPT)
• Exposure to cutting-edge privacy and compliance initiatives

Originally posted on Himalayas