Data Protection Officer

**Company Profile**:
We’re a professional, dedicated team operating in every major market across the globe, with a knack for helping businesses thrive and expand. We offer our payroll, employer of record (EOR) and accounting services to businesses of all sizes in a growing number of over 100 countries — and counting

TopSource Worldwide brings a level of service and business value to midsize companies that were previously only available to the largest global corporations. Our services are easy to deploy, affordable and scalable — from basic payroll and accounting functions to complete employer-of-record (EOR) solutions.

We champion and invest in our people and provide a supportive environment. For our clients, we are a trusted partner and operate in a consultative and collaborative way to drive win-win outcomes at every opportunity.

Sound good? Then, carry on reading...

**Role summary**:
**Base location**: India (Pune)

**Reports to**: Head of Transformation

**Roles & Responsibilities**:

- **Strategic Planning and Implementation**:

- Develop and execute comprehensive information security and data protection strategies tailored to payroll processing operations.
- Establish and maintain an effective information security management framework aligned with industry best practices and regulatory requirements. Lead the design, implementation, and maintenance of security policies, procedures, and controls to protect sensitive payroll and employee data.- **Regulatory Compliance**:

- Ensure compliance with relevant data protection regulations such as GDPR, CCPA, and industry-specific requirements related to payroll processing.
- Conduct regular audits and assessments to verify adherence to legal and regulatory standards. Manage relationships with regulatory bodies and coordinate responses to data breaches or compliance issues.- **Risk Management**:

- Identify and assess security and data protection risks within payroll processing systems and operations.
- Develop and implement risk mitigation strategies and contingency plans to address potential threats and vulnerabilities. Oversee the management of data / security incidents, including investigations, root cause analysis, and remediation efforts.- **Data Protection and Privacy**:

- Ensure robust data protection measures are in place to safeguard employee and payroll data from unauthorized access or breaches.
- Develop and implement data privacy policies and procedures to comply with global data protection laws.
- Conduct regular data privacy impact assessments (DPIAs) and ensure that data processing activities align with privacy requirements.
- **Team Leadership and Training**:

- Lead and mentor a team of information security and data protection professionals, providing guidance and support.
- Develop and deliver training programs to enhance awareness and understanding of information security and data protection within the organization. Foster a culture of security awareness and compliance across the payroll processing team and broader organization.- **Collaboration and Communication**:

- Collaborate with IT, payroll, legal, and other departments to ensure seamless integration of security and data protection practices.
- Communicate security and data protection policies, procedures, and incidents to senior management and stakeholders.
- Act as a liaison for information security and data protection matters with clients, vendors and external partners.

**Key Attributes & Skills**:

- Strong knowledge of information security frameworks, standards, and best practices (e.g., ISO/IEC 27001, NIST).
- Expertise in data protection laws and regulations, including GDPR, CCPA, and industry-specific compliance requirements.
- Proven track record of managing security incidents, risk assessments, and audits.
- Excellent leadership, communication, and interpersonal skills.
- Ability to work effectively with cross-functional teams and external partners.
- High level of integrity and professionalism.
- Strong analytical and problem-solving skills.
- Ability to thrive in a fast-paced, dynamic environment.

**Desired Qualifications**:

- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field. A Master’s degree or relevant certifications (e.g., CISSP, CISM, CISA) is highly desirable.
- 8-10 years of experience in information security and data protection, with at least 3 years in a managerial or senior role.
- Extensive experience in the payroll processing industry, with a deep understanding of its security and compliance requirements.