AVP - Data Protection (Techno-Legal) at Sumitomo Mitsui Banking Corporation (SMBC), New Delhi

Sumitomo Mitsui Banking Corporation (SMBC) is headquartered in Tokyo and is a core member of Sumitomo Mitsui Financial Group (SMBC Group). With a history going back to 1876, it is one of the largest Japanese banks by assets and offers personal, corporate and investment banking services through a global network, with a strong presence across the Asia Pacific region.

SMBC is hiring an AVP - Data Protection (Techno-Legal) for its New Delhi office. The role supports the bank's Data Protection Officer (DPO) on privacy legal and regulatory work, privacy documentation, contract review, privacy impact assessments and privacy-by-design reviews of technology projects. SMBC posted the vacancy on its careers portal on 23 September 2026.

• Privacy legal and regulatory research, including applicable data protection requirements, regulatory developments and internal compliance obligations; structured summaries and implementation trackers for DPO review (20% of time)
• Drafting and periodic review of privacy policies, procedures, consent wording, privacy notices, forms and internal guidance, with version control and evidence maintenance (20%)
• Review of contracts, data processing clauses, confidentiality terms and third-party privacy requirements with Legal, Procurement, Information Security and business teams (15%)
• Conducting or supporting Privacy Impact Assessments and DPIAs for new or changed products, processes, systems and technologies, and tracking mitigations and residual risks (15%)
• Data flow mapping, data inventory, records of processing and review of personal data collection, use, storage, sharing, retention and disposal (15%)
• Privacy-by-design reviews for technology projects and change initiatives (10%)
• Support for privacy incident assessment, data subject requests and grievance handling, awareness activities and periodic DPO reporting (5%)

• A relevant graduate or post-graduate qualification
• A combined legal and technology background is preferred
• Working knowledge of data protection and privacy requirements, legal research, contract and policy review, technology systems, data lifecycle concepts, privacy-by-design, DPIA/PIA, data subject rights, grievance handling and basic information security controls
• A relevant privacy, technology or security certification may be desirable

• Specialist skills: legal and regulatory research, drafting and document review, contract clause review, data flow mapping, privacy assessment, technology risk understanding, issue tracking, Microsoft Office and structured record management
• Familiarity with privacy management or GRC tools is desirable
• Behavioural skills: analytical thinking, attention to detail, written and verbal communication, documentation discipline, stakeholder coordination, confidentiality, ownership and the ability to work under the guidance of the DPO

The position is based at SMBC's office in New Delhi, India. The listing does not state the salary or the years of experience required.

Apply online through the Apply now button on the SMBC careers listing, which asks you to sign in or create a profile on the SMBC careers portal. The listing is valid on the portal until 30 October 2026, but corporate vacancies can close earlier once filled, so apply early.