Shoppers Stop
Website:
shoppersstop.com
Company:
https://www.linkedin.com/company/shoppers-stop
Industries: Retail
Job details:
Job Title: Data Security Lead
Role Summary:
We are seeking an experienced and technically proficient Data Security Lead to design, implement, and
govern data protec8on strategies across the enterprise. This role involves securing data across its
lifecycle—crea8on, storage, transmission, and destruc8on—while ensuring compliance with data privacy
laws (DPDP, GDPR, etc.), internal policies, and global security frameworks.`
Technical Responsibili:es:
Cloud & Data Security Architecture:
• Architect security controls for AWS, Azure, and GCP focusing on DPDP-compliant data handling.
• Implement cloud-na8ve encryp8on using customer-managed keys (CMKs) and enable key
rota:on and access audit logging per DPDP accountability guidelines.
• Design data residency and localiza:on controls in alignment with DPDP storage requirements.
Data Privacy & Protec:on:
• Create and maintain data classifica:on and sensi:vity labelling models based on DPDP
categories (Personal Data vs. Sensi8ve Personal Data).
• Implement Privacy by Design and Privacy by Default principles into cloud-na8ve data workflows.
• Opera8onalize data subject rights management – enable discoverability, consent tracking, and
erasure workflows via APIs and orchestra8on tools.
• Integrate Consent Management PlaHorms (CMP) with CASB, DLP, and analy8cs pipelines to
enforce lawful processing under DPDP Sec8on 5 & 7.
• Ensure DPIA (Data Protec:on Impact Assessment) is conducted for all high-risk cloud-hosted
personal data processing use cases.
Compliance, Audit, and Governance:
• Build and maintain security controls and technical safeguards to comply with DPDP, GDPR, HIPAA,
or industry-specific standards.
• Implement technical support for:
§ Data Subject Rights Management (access, erasure, consent withdrawal).
§ Data Reten:on & Minimiza:on Policies.
§ Consent Capture & Audit Logging.
• Lead or support Data Protec:on Impact Assessments (DPIAs) and privacy threat modelling.
IAM & Access Control for Data:
• Define aNribute-based access control (ABAC) or role-based access control (RBAC) models for
sensi8ve data repositories.
• Integrate iden8ty governance tools (e.g., SailPoint, Saviynt) to manage and monitor privileged
data access.
• Implement Just-in-Time access, segrega:on of du:es, and mul:-approval workflows for highsensi
8vity datasets.
Technical Tools & Frameworks (DPDP Relevant):
• Data Protec:on: Netskope DLP, Netskope CASB, Titus, Microso\ AIP
• Privacy Tech: Go Trust, OneTrust, Securi8.ai for automated data discovery and consent
management
• Compliance-as-Code: OPA/Gatekeeper policies for ensuring DPDP-aligned deployments
Required Experience:
• 8-12 years in cybersecurity with 5 years in data protec:on and cloud security.
• Proven track record implemen8ng privacy-enhancing technologies and security automa:on in
cloud-na8ve environments.
Cer:fica:ons (Preferred):
• Security: AWS Security Specialty, Azure Security Engineer, CCSP, CISSP
• Privacy: CIPT, CIPP/IT, or DPDP Prac::oner Training (e.g., DSCI Cer:fied Privacy Professional)
• Compliance: ISO/IEC 27018, ISO 27701 (op8onal but preferred)
Click on Apply to know more.