Staff Data Privacy Engineer

About the role

Staff Data Privacy Engineer Razorpay is one of India’s leading full-stack financial technology companies, powering the way businesses move, manage, and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - we’ve since grown into a fintech powerhouse driving India’s digital payment revolution. Razorpay powers millions of businesses with a smarter, scalable stack that goes beyond transactions to help them truly build and grow. From building AI-native agentic payments, to AI-assisted fraud detection and real-time risk intelligence to automated reconciliation, smart payouts, and predictive financial insights, we are embedding intelligence across our stack to make money movement faster, safer, and more efficient. In close collaboration with ecosystem partners - including banks, networks, regulators - we are pioneering industry-first solutions that are shaping the next era of fintech Across India, Singapore and Malaysia, our products span everything from seamless checkouts to payroll automation - powering a fintech ecosystem that’s redefining how money moves across Asia. Today, that ecosystem supports everyone from early-stage startups to some of India’s largest enterprises, enabling them to accept, process, and disburse payments at scale while expanding into new ways of managing money more efficiently. Our scale speaks volumes: Razorpay processes $180+ billion in annualized transactions, powering leading businesses like Airbnb, Facebook, WhatsApp, Airtel, CRED, BookmyShow, Zomato, Swiggy, Lenskart, Mirae Asset Capital markets, Indian Oil, National Pension Scheme - and over 100 of India’s unicorns. With strong roots in India and growing operations in Southeast Asia, we are shaping the next chapter of financial technology across the region. We are backed by global investors including GIC, Peak XV Partners (formerly Sequoia Capital India & SEA), Tiger Global, Ribbit Capital, Matrix Partners, MasterCard, and Salesforce Ventures, having raised over $740 million to date. Strategic acquisitions - including Ezetap (POS and offline payments), Curlec (Malaysia expansion), BillMe (digital invoicing), and POP (rewards-first UPI) - along with earlier moves in fraud prevention, payroll, and lending, have further strengthened our platform and widened our footprint across Asia. But what truly sets Razorpay apart is our culture. At Razorpay, ownership is our oxygen - you own what you build, with no micromanagement or red tape, just the runway to make your ideas fly. Learning is a lifestyle - if you’re curious, you’ll feel at home here. People > Pedigree - we hire for attitude, hustle, and hunger more than degrees. Transparency thrives over titles - this is where interns question CXOs and CXOs say “thank you.” Guided by our values of Customer First, Autonomy & Ownership, Agility with Integrity, Transparency, Challenging the status quo and a strong belief that Razorpay grows with Razors, you’ll be part of a 3000+ strong team building not just products, but the financial infrastructure of the future. Role : Staff Data Privacy Engineer This is the operational core of Razorpay's privacy function — a senior IC role that translates the Head's strategy into day-to-day technical execution, while directly leading a Lead Compliance Engineer and owning the tooling, assessments, and AI governance pipeline. This role requires someone who can hold the space between strategy and execution — not just translate the Head's vision downward, but build the actual machinery that makes privacy operations run. As a Staff IC, you will technically lead a Lead Compliance Engineer and own the delivery of everything from AI tool onboarding to DPIA automation. Regulatory fluency is the floor. What differentiates the right candidate is their ability to build, automate, and lead — in an AI-first compliance environment that has no historical playbook. KEY RESPONSIBILITIES : A. Privacy Programme Management & Regulatory Operations - Own the operationalisation of DPDP Act 2023 and GDPR requirements across Razorpay products, systems, and vendor stack — in coordination with the Head. - Manage and continuously improve the Record of Processing Activities (RoPA), consent framework, data subject rights workflows, and data classification register. - Lead execution of Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) — with increasing automation over time. - Oversee cross-border data transfer compliance: SCCs, adequacy decisions, and DPDP cross-border transfer rules. - Coordinate with the Head for regulatory audits (RBI / SEBI), data privacy reviews, and incident reporting timelines. - Enforce consent, purpose limitation, data minimisation, and retention policies in live production system B. Technical Privacy Posture & Assessment Delivery - Lead and personally conduct infrastructure privacy reviews of cloud environments (AWS / GCP / Azure) — access controls, encryption, data residency, audit logging. - Drive vendor and SaaS tool assessments beyond standard questionnaires — review actual data flows, API integrations, and technical configurations. - Own the technical quality of privacy assessments produced by the team — review, calibrate, and ensure regulatory alignment. - Monitor control effectiveness across production systems; identify gaps and partner with engineering to define remediation. - Build and maintain the team's assessment methodology, templates, and scoring frameworks. C. AI Systems Privacy & Governance (LLM-Focused) - Own Razorpay's AI tool onboarding and privacy review process — from intake to sign-off. - Lead privacy assessments of LLM-powered tools, internal AI agents, and third-party AI integrations, with focus on data input, storage, retention, and cross-border sharing. - Build and maintain the AI privacy onboarding framework: checklists, risk registers,...

Key responsibilities

• check_circleCollaborate with the team on day-to-day project tasks
• check_circleLearn tools and processes used by the organization
• check_circleDocument work and participate in team meetings
• check_circleSupport quality checks and continuous improvement

Requirements

• check_circleOwn the operationalisation of DPDP Act 2023 and GDPR requirements across Razorpay products, systems, and vendor stack — in coordination with the Head.
• check_circleManage and continuously improve the Record of Processing Activities (RoPA), consent framework, data subject rights workflows, and data classification register.
• check_circleLead execution of Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) — with increasing automation over time.
• check_circleOversee cross-border data transfer compliance: SCCs, adequacy decisions, and DPDP cross-border transfer rules.
• check_circleCoordinate with the Head for regulatory audits (RBI / SEBI), data privacy reviews, and incident reporting timelines.
• check_circleEnforce consent, purpose limitation, data minimisation, and retention policies in live production system
• check_circleLead and personally conduct infrastructure privacy reviews of cloud environments (AWS / GCP / Azure) — access controls, encryption, data residency, audit logging.
• check_circleDrive vendor and SaaS tool assessments beyond standard questionnaires — review actual data flows, API integrations, and technical configurations.
• check_circleOwn the technical quality of privacy assessments produced by the team — review, calibrate, and ensure
• check_circleMonitor control effectiveness across production systems; identify gaps and partner with engineering to define remediation.
• check_circleBuild and maintain the team's assessment methodology, templates, and scoring frameworks.
• check_circleOwn Razorpay's AI tool onboarding and privacy review process — from intake to sign-off.

Skills & keywords

Benefits & perks

• check_circleMentorship
• check_circleCertificate of completion
• check_circleFlexible work arrangement where applicable