Staff Data Privacy Engineer

Razorpay is one of Indias leading full-stack financial technology companies powering the way businesses move manage and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - weve since grown into a fintech powerhouse driving Indias digital payment revolution.

Razorpay powers millions of businesses with a smarter scalable stack that goes beyond transactions to help them truly build and grow.

From building AI-native agentic payments to AI-assisted fraud detection and real-time risk intelligence to automated reconciliation smart payouts and predictive financial insights we are embedding intelligence across our stack to make money movement faster safer and more close collaboration with ecosystem partners - including banks networks regulators - we are pioneering industry-first solutions that are shaping the next era of fintech

Across India Singapore and Malaysia our products span everything from seamless checkouts to payroll automation - powering a fintech ecosystem thats redefining how money moves across Asia.

Today that ecosystem supports everyone from early-stage startups to some of Indias largest enterprises enabling them to accept process and disburse payments at scale while expanding into new ways of managing money more efficiently.

Our scale speaks volumes: Razorpay processes $180 billion in annualized transactions powering leading businesses like Airbnb Facebook WhatsApp Airtel CRED BookmyShow Zomato Swiggy Lenskart Mirae Asset Capital markets Indian Oil National Pension Scheme - and over 100 of Indias unicorns. With strong roots in India and growing operations in Southeast Asia we are shaping the next chapter of financial technology across the region.

We are backed by global investors including GIC Peak XV Partners (formerly Sequoia Capital India & SEA) Tiger Global Ribbit Capital Matrix Partners MasterCard and Salesforce Ventures having raised over $740 million to date. Strategic acquisitions - including Ezetap (POS and offline payments) Curlec (Malaysia expansion) BillMe (digital invoicing) and POP (rewards-first UPI) - along with earlier moves in fraud prevention payroll and lending have further strengthened our platform and widened our footprint across Asia.

But what truly sets Razorpay apart is our culture. At Razorpay ownership is our oxygen - you own what you build with no micromanagement or red tape just the runway to make your ideas fly. Learning is a lifestyle - if youre curious youll feel at home here. People > Pedigree - we hire for attitude hustle and hunger more than degrees. Transparency thrives over titles - this is where interns question CXOs and CXOs say thank you. Guided by our values of Customer First Autonomy & Ownership Agility with Integrity Transparency Challenging the status quo and a strong belief that Razorpay grows with Razors youll be part of a 3000 strong team building not just products but the financial infrastructure of the future.

This is the operational core of Razorpays privacy function a senior IC role that translates the Heads strategy
into day-to-day technical execution while directly leading a Lead Compliance Engineer and owning the tooling
assessments and AI governance pipeline.

RAZORPAYS HIRING PHILOSOPHY FOR THIS ROLE :

This role requires someone who can hold the space between strategy and execution not just translate the Heads vision downward but build the actual machinery that makes privacy operations run. As a Staff IC you willtechnically lead a Lead Compliance Engineer and own the delivery of everything from AI tool onboarding to DPIAautomation. Regulatory fluency is the floor. What differentiates the right candidate is their ability to buildautomate and lead in an AI-first compliance environment that has no historical playbook.

KEY RESPONSIBILITIES :

A. Privacy Programme Management & Regulatory Operations

• Own the operationalisation of DPDP Act 2023 and GDPR requirements across Razorpay products systemsand vendor stack in coordination with the Head.
• Manage and continuously improve the Record of Processing Activities (RoPA) consent framework data subject rights workflows and data classification register.
• Lead execution of Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) with increasing automation over time.
• Oversee cross-border data transfer compliance: SCCs adequacy decisions and DPDP cross-border transferrules.
• Coordinate with the Head for regulatory audits (RBI / SEBI) data privacy reviews and incident reportingtimelines.
• Enforce consent purpose limitation data minimisation and retention policies in live production system

B. Technical Privacy Posture & Assessment Delivery

• Lead and personally conduct infrastructure privacy reviews of cloud environments (AWS / GCP / Azure) access controls encryption data residency audit logging.
• Drive vendor and SaaS tool assessments beyond standard questionnaires review actual data flows APIintegrations and technical configurations.
• Own the technical quality of privacy assessments produced by the team review calibrate and ensure
  regulatory alignment.
• Monitor control effectiveness across production systems; identify gaps and partner with engineering to define remediation.
• Build and maintain the teams assessment methodology templates and scoring frameworks.

C. AI Systems Privacy & Governance (LLM-Focused)

• Own Razorpays AI tool onboarding and privacy review process from intake to sign-off.
• Lead privacy assessments of LLM-powered tools internal AI agents and third-party AI integrations withfocus on data input storage retention and cross-border sharing.
• Build and maintain the AI privacy onboarding framework: checklists risk registers approval workflows andexception management.
• Define and document AI-specific privacy risks: prompt data leakage model memory third-party AI providerdata usage and agentic system data access.
• Embed Privacy-by-Design into AI product lifecycles engaging product and engineering teams fromideation through to inference.
• Track third-party AI provider privacy policies (OpenAI Anthropic Google etc.) and maintain a currentcompliance alignment register

D. Compliance Automation & AI-Powered Privacy Operations

• Design build and maintain AI-assisted compliance workflows DPIA generation evidence collectioncontrol testing and risk flagging.
• Create and maintain compliance dashboards that give engineering product and leadership real-timevisibility into privacy posture.
• Develop standardised playbooks checklists and templates that enable product teams to self-serve privacyreviews with confidence.
• Evaluate and validate the accuracy and regulatory alignment of AI-generated compliance outputs beforethey are accepted as formal evidence.
• Continuously improve the teams tooling stack GRC platforms privacy management tools AI assistants for maximum operational leverage.

E. Technical Leadership & Stakeholder Management

• Technically lead mentor and develop the Lead Compliance Engineer Privacy; set clear technical goalsunblock work and drive their professional growth.
• Act as the primary point of contact for engineering product legal and business teams on day-to-day privacy
  matters.
• Translate privacy requirements and risk findings into actionable prioritised guidance for technical and non- technical stakeholders.
• Support the Head with board-level and leadership reporting prepare data evidence packages and risk summaries.
• Maintain the privacy incident register manage incident response timelines and ensure regulatory reporting deadlines are met.
• Drive a culture of privacy-as-enabler within the organisation position compliance as a feature not a gate.

What will set you apart:

• Hands-on DPDP GDPR implementation experience
• Building privacy automationtooling from scratch
• Prior assessment work on AI or LLM-powered products
• Experience supportingregulatory examinations in a FinTech context.