Security - Security Lead (Data Protection)

About Us:

Paytm is India’s largest digital payments and financial services platform, leading the mobile QR revolution. We power millions of businesses and individuals, and we’re building scalable, resilient systems to serve half a billion Indians and beyond.

Here at Paytm, technology isn't just about keeping up, it's about building the future. We believe the next generation of engineers must not only scale systems to billions but also leverage AI and GPT tools to accelerate innovation.

Role Overview:

We are seeking an experienced Data Protection Lead, who will be responsible for overseeing the organization's data protection strategy and ensuring compliance with Indian laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill. The DPPM will work closely with DPO and regulatory authorities to ensure that sensitive data is processed securely and ethically. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards and law.

Key Responsibilities:

• Legal Compliance: Ensure adherence to data protection laws, including local DPDPA, IT Act and international regulations like GDPR.

• Policy Development: Formulate and implement data protection policies and guidelines across the organization.

• Data Classification & Security: Well versed in managing the DSPM, DLP and PET technologies.

• Data Breach Management: Investigate and report data breaches to relevant authorities within the stipulated timeframe.

• Training & Awareness: Conduct training sessions for employees on data protection practices and raise awareness about privacy policies.

• Impact Assessments: Perform Data Protection Impact Assessments (DPIA) to identify risks and recommend mitigation strategies.

• Grievance Redressal: Act as the point of contact for data principals (individuals) for grievances related to data handling or privacy violations.

• Recordkeeping: Maintain records of all data processing activities and policies for audit and regulatory purposes.

• Liaison: With regulatory agencies and stakeholders regarding data protection matters.

Qualifications and Experience:

• Bachelor's degree in Information Security, Computer Science, and Law.

• Certification in Data Protection or Privacy Management is mandatory, like - CIPM, CDPSE, DCPLA, DCPP and DCDPO

• 5-8 years of experience in security management.

• Strong understanding of IT infrastructure , data security best practices, and frameworks.

• Familiarity with regulatory requirements and compliance standards (e.g., RBI, SEBI).

• Excellent communication, interpersonal, analytical and leadership skills.

• Knowledge of emerging technologies, their impact on data protection and ability to handle sensitive information discreetly.

Why you should join us:

• You’ll build at true scale systems handling millions of transactions per day, sub-100ms latencies, and five 9s availability.

• You’ll work in a team that is serious about engineering, no fluff, just deep tech, deep impact.

• You’ll be encouraged to use AI tools daily — coding, debugging, testing — and even invent new ways of using AI in software development.

• You’ll work alongside engineers who love tech deeply, and where innovation is the default expectation.

• Paytm offers you a career — not just a job — to become a next-gen tech leader.