Corporate Legal

Corporate Legal

Maharashtra, India

BE THE FIRST TO APPLY

JOB DESCRIPTION

The Senior Manager / AVP – Legal Contract Management & Data Privacy will be responsible for managing the organisation's end-to-end commercial contracting requirements and supporting the development and implementation of its data privacy and protection framework.

The role will provide practical legal advice to business teams, negotiate complex commercial arrangements, establish contract governance standards, identify and mitigate contractual and privacy risks, and ensure compliance with applicable data protection requirements.

The position requires a commercially oriented legal professional capable of partnering independently with senior business stakeholders while maintaining appropriate legal and regulatory safeguards.

RESPONSIBILITIES

Contract Drafting, Review & Negotiation

Independently draft, review, negotiate and finalize a wide range of commercial agreements, including

Master Service Agreements (MSAs)

Service / Vendor Agreements

Software and SaaS Agreements

Technology and IT Agreements

Software Licensing Agreements

Professional Services Agreements

Non-Disclosure Agreements (NDAs)

Data Processing Agreements (DPAs)

Consultancy Agreements

Procurement and Outsourcing Agreements

Statements of Work (SOWs)

Business Partnership / Collaboration Agreements

Amendments and termination arrangements.

Lead negotiations on key contractual provisions relating to

Limitation of liability

Indemnities

Intellectual property rights

Confidentiality

Data protection and information security

Representations and warranties

Service levels

Insurance

Audit rights

Business continuity

Termination and exit management

Dispute resolution.

Identify legal and commercial risks and recommend practical risk-mitigation measures to business stakeholders.

Develop appropriate negotiating positions and escalation thresholds for high-risk contractual provisions.

Contract Lifecycle Management & Governance

Manage and strengthen the organisation's Contract Lifecycle Management (CLM) framework from contract initiation through execution, renewal and termination.

Establish and periodically update

Standard contract templates

Clause libraries

Contracting playbooks

Deviation matrices

Approval matrices

Delegation of authority requirements

Standard negotiation positions.

Implement mechanisms for tracking contractual obligations, renewals, expiries, notice periods and key deliverables.

Maintain effective contract repositories and ensure appropriate documentation and audit trails.

Drive improvements in contract turnaround times and contracting efficiency without compromising legal safeguards.

Support implementation and optimisation of contract management technology and workflow automation.

Data Privacy & Data Protection

Support and/or lead implementation of the organisation's privacy compliance framework, including compliance with applicable Indian data protection requirements and, where relevant to the organisation's operations, international privacy requirements.

Advise business, technology, procurement, HR, marketing and other functions on privacy implications associated with

Collection and processing of personal data

Employee data

Customer and vendor information

Data sharing

Cross-border data arrangements

Technology platforms

New products and business initiatives.

Draft, review and periodically update

Privacy policies and notices

Consent language

Data Processing Agreements

Data-sharing arrangements

Vendor privacy clauses

Employee privacy documentation

Internal privacy procedures and standards.

Facilitate Privacy Impact Assessments / Data Protection Impact Assessments for new initiatives, products, systems and processing activities, as applicable.

Partner with Information Security and Technology teams to ensure alignment between contractual privacy obligations and technical/security controls.

Privacy Governance & Compliance

Support maintenance of inventories or records relating to personal-data processing activities.

Coordinate with relevant internal functions for handling data principal/data subject requests in accordance with applicable requirements.

Establish and monitor privacy compliance processes relating to data retention, deletion, access, sharing and third-party processing.

Conduct periodic privacy compliance reviews and identify remediation requirements.

Monitor regulatory developments relating to privacy, technology, digital regulation and data protection and assess their potential impact on the organisation.

Develop and deliver privacy and contracting awareness/training programmes for relevant employees.

Third-Party & Vendor Risk Management

Conduct legal and privacy reviews of vendors, service providers and other third parties handling organisational or personal data.

Review vendor privacy, cybersecurity and data-processing commitments in collaboration with Information Security, Procurement, IT Risk and business teams.

Ensure appropriate contractual safeguards are incorporated based on the nature and risk of the engagement.

Assist in establishing risk-based vendor contracting and privacy due-diligence standards.

Data Breach & Incident Management

Provide legal and privacy support in relation to potential or actual data-security incidents.

Coordinate with Information Security, IT, Compliance and senior management in assessing legal and contractual implications arising from incidents.

Review contractual breach-notification obligations and support regulatory/customer notification assessments where applicable.

Assist with post-incident remediation and strengthening of contractual and privacy controls.

Business & Stakeholder Advisory

Act as a trusted legal partner to business teams on commercial contracting and data privacy matters.

Provide clear, commercially practical advice rather than purely theoretical legal opinions.

Engage with senior stakeholders to resolve complex contractual negotiations and risk issues.

Co