Nirmal Devendran

o  Managing Data privacy and Information security program which related policies, processes, standards, and procedures are in line with regional Laws and industry best practices.

o    Accountable for Organization Information Security & Data privacy Management Program, Execution of GDPR, CCPA and other countries Data privacy laws.

o    Oversees the planning, execution, management of projects related to Data privacy compliance, control assurance, audits, information security, risk management, vendor management and infrastructure.

o   Leading the program for development and implementation of Data Privacy strategy, policy, framework and performing PIA (Privacy Impact assessment) and ensure data security in line with regional regulations and industry best practices.

o  Developing and strategizing data privacy and Information security notices and Training materials; conducting awareness sessions and training to employees, contractors to increase understanding of company privacy policies, data handling practices and procedures and other privacy (legal) obligations.

o  Monitoring the measurement and review of internal Audit processes, Control testing especially those that affect the Compliance of the project deliverables.

o  Prepare/maintain risk matrix for identifying risks and evaluating the adequacy of the risk mitigation strategies in data protection and information security process in line with region Regulation and standards.

o  Performs Supplier/Vendor assessment on Data privacy to ensure Third party teams/applications meeting compliance standards.