Legal Job | AVP at Sumitomo Mitsui Banking Corporation [Data Protection]: Apply Now!

SMBC is hiring an AVP – Data Protection (Techno-Legal) in New Delhi to support data protection, privacy compliance, technology risk assessment, and related legal and regulatory matters.

Contents hide

1. About Sumitomo Mitsui Banking Corporation (SMBC)

2. About the Job

3. Eligibility

4. Responsibilities

5. Location

6. Application Procedure

About Sumitomo Mitsui Banking Corporation (SMBC)

Sumitomo Mitsui Banking Corporation (SMBC) is headquartered in Tokyo and is a core member of Sumitomo Mitsui Financial Group (SMBC Group). With a history dating back to 1876, SMBC is a global financial institution providing personal, corporate, and investment banking services. The bank operates through an integrated global network and has a strong presence across the Asia Pacific region.

Add LawBhoomi as your preferred source on Google.

Add Now →

About the Job

SMBC is hiring for the position of AVP – Data Protection (Techno-Legal) in its New Delhi office. The role focuses on supporting privacy legal and regulatory requirements, reviewing privacy-related documentation and contracts, conducting privacy assessments, supporting technology projects, and coordinating data protection activities under the guidance of the Data Protection Officer (DPO).

Eligibility

Relevant graduate or postgraduate qualification.
A combined legal and technology background is preferred.
Working knowledge of data protection and privacy requirements.
Knowledge of legal research, contract and policy review, technology systems, data lifecycle concepts, privacy-by-design, DPIA/PIA, data subject rights, grievance handling, and basic information security controls.
Legal and regulatory research skills.
Experience in drafting and document review.
Understanding of contract clause review and data flow mapping.
Ability to conduct privacy assessments and understand technology-related risks.
Familiarity with privacy management or GRC tools is desirable.
Relevant privacy, technology, or security certification may be desirable.
Strong analytical thinking, attention to detail, and written and verbal communication skills.
Strong documentation discipline and stakeholder coordination skills.
Ability to maintain confidentiality and work under the guidance of the DPO.

Responsibilities

Support privacy legal and regulatory research, including reviewing applicable data protection requirements, regulatory developments, and internal compliance obligations.
Prepare structured summaries and implementation trackers for DPO review.
Maintain regulatory reference materials, obligation registers, and supporting records.
Assist in drafting and periodically reviewing privacy policies, procedures, consent wording, privacy notices, forms, internal guidance, and other privacy-related legal documentation.
Support version control, approvals, publication, and evidence maintenance.
Review contracts, data processing clauses, confidentiality terms, and third-party privacy requirements in coordination with Legal, Procurement, Information Security, and relevant business teams.
Maintain review comments, issue logs, and closure evidence.
Conduct or support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new or changed products, processes, systems, and technologies.
Identify and document legal and technology-related privacy risks.
Track mitigations, owners, target dates, and residual risks for DPO oversight.
Support data flow mapping, data inventory, records of processing, and review of personal data collection, use, storage, sharing, retention, and disposal.
Coordinate information collection and maintain supporting documentation.
Participate in privacy-by-design reviews for technology projects and change initiatives.
Assess whether privacy requirements are appropriately reflected in system and process design.
Document observations and follow up on action items with relevant stakeholders.
Support privacy incident assessment, data subject request and grievance handling, awareness activities, and periodic DPO reporting.
Maintain case files, trackers, dashboards, and governance meeting inputs.