Legal & Compliance Head (Data Privacy) with KKR (Gurugram)

Deadline Open Deadline

Location Gurugram, Haryana, India

Salary As per industry standards

Details of the Organization

KKR & Co. Inc. is a global investment firm specializing in alternative asset management, capital markets, and insurance solutions. With a focus on generating attractive investment returns, KKR employs a disciplined approach and supports growth in portfolio companies and communities. Through investment funds in private equity, credit, and real assets, along with strategic partnerships managing hedge funds, KKR offers diverse financial services. Additionally, its insurance subsidiaries under The Global Atlantic Financial Group provide retirement, life, and reinsurance products.

Details of the Job/Internship

KKR is hiring a Legal & Compliance Head (Data Privacy) with 10+ years of experience to join their Gurugram office.

Role and Responsibilities

Develop, implement, and maintain comprehensive policies and procedures in line with GDPR and other relevant regulations.
Ensure all data processing activities comply with applicable data protection laws and internal policies.
Develop and implement the privacy compliance program including providing requirements for new data uses, cross-border data transfers, data subject rights, incident preparedness and response, and privacy risk management.
Foster a culture of continuous improvement in data privacy practices within the organization.
Coordinate and manage responses to data breaches, including investigation, remediation, and reporting to regulatory authorities.
Coordinate ongoing activities as well as perform internal reviews, audits, and assessments to ensure adherence to data protection laws and internal policies.
Prepare and present compliance reports and updates to senior management and regulatory authorities.
Develop and maintain an incident response plan for data breaches and privacy incidents.
Manage, respond, and oversee processes for handling data subject requests, such as access, rectification, and deletion requests.
Serve as the primary point of contact for data protection authorities and other regulatory bodies.
Provide expert advice and guidance to the business on data privacy matters and regulatory requirements.
Collaborate with internal stakeholders to ensure cohesive data privacy practices are developed and maintained.
Identify and assess data privacy risks related to business activities and third-party relationships.
Implement risk mitigation strategies and monitor their effectiveness.
Stay updated on changes to data protection laws and regulations and adjust policies and practices accordingly.
Review vendor privacy risk questionnaires.
To deploy practices of privacy by design and default within KKR.
Conduct privacy impact assessments.
Collaborate with various (internal and external) stakeholders to negotiate privacy and cyber terms in vendor agreements (e.g., data processing agreements, data security agreements, data transfer agreements and related documentation).
Maintain records of processing activities and map flow of data for vendors, employees, and other third parties.
Ensure all documentation related to data privacy and protection is up to date and compliant with relevant regulations.
Develop and distribute educational materials to raise awareness about data privacy issues.
Conduct training sessions and workshops for employees on data privacy and protection practices.

Eligibility

Bachelor’s degree in law from a reputed law school, Information Technology, Business, or a related field. A master’s degree or professional certifications (e.g., CIPP/E, CIPM) is preferred.
Minimum of 10 years of experience in data privacy compliance, preferably within the financial services sector, and in-depth knowledge of U.S. and EU privacy laws- including GDPR and CCPA, etc.
In-depth knowledge of GDPR and other relevant data protection laws and regulations across the globe.
Excellent proficiency in Microsoft Office (including Microsoft Excel).