Data Protection and Cybersecurity Manager

CHIREC INTERNATIONAL SCHOOL

• CHIREC International is a leading K-12 school located in Hyderabad,
• India offering International Baccalaureate Diploma Programme (IBDP), Cambridge
• International Examinations (CIE) and Central Board of Secondary Education
• (CBSE). CHIREC was founded in 1989 by Founder-Director, Ratna Reddy as a summer
• camp that offered programmes in fine arts, performing arts, computers, indoor
• and outdoor sports. Today, CHIREC is one of the premier educational institutions
• in the country for excellence in academics and co-curricular activities.
• CHIREC’s mission is to nurture the innate potential of its students to enable
• them to excel in whatever they choose. The school helps students to grow and
• evolve into open-minded, ethical and caring individuals who are focused and
• encouraged to set goals, attain them and exceed expectations. As a valued
• member of the Cognita global group, and recognized by respected educational
• bodies like the Council of International Schools (CIS) and the IB Organization,
• CHIREC International School is known for its exceptional quality of
• education.

About Cognita

• At Cognita, we know every student is unique. We nurture their distinct
• personalities and strengths. We support them academically, socially, and
• emotionally, wherever they are in the world, wherever they’re starting from.
• And each and every one of our schools is unique too.
• We protect what’s special about them, while offering them rich knowledge,
• opportunities, and best practices. And they get to be part of something bigger.
• We open their classrooms to the collective wisdom of over 100 schools in 16
• countries, ensuring every child gets an education that’s, quite literally,
• world class.
• It’s an individual approach that empowers every school, teacher and student to
• focus on what they do best. And thrive.

Position

Overview

• The Data Protection and
• Cybersecurity Manager will initially focus on coordinating and driving the
• organization's data protection & privacy implementation, including
• implementation of the DPDPA and related requirements. The role will work
• closely with business and IT teams to establish and embed appropriate data
• protection practices, governance, documentation, and controls.
• As part of the role, the
• position will also work closely with the IT team on cybersecurity, technology
• risk, security controls, and day-to-day IT operational matters, with the scope
• expected to evolve as the organization's data protection and cybersecurity
• capabilities mature.
• The position coordinates organization-wide
• implementation of the DPDPA, applicable privacy requirements, and relevant
• cybersecurity standards and practices. Working with stakeholders across
• departments, the role ensures that data protection, privacy and security
• requirements are embedded into business processes, technology initiatives,
• vendor relationships, and day-to-day operations.

Scope

• The role identifies gaps,
• coordinates corrective actions, monitors implementation, and provides practical
• guidance to business and technology teams. Final legal interpretations,
• executive-level policy ownership, and acceptance of significant risks remain
• with the appropriate senior management, Legal/Compliance, or designated privacy
• leadership. The scope of IT involvement will evolve based on organizational
• priorities and requirements.

Job

Responsibilities

Data

Protection & Privacy

• Act as the central point of coordination for

organization-wide data protection & privacy implementation.

• Coordinate compliance with the DPDPA and other

applicable data protection and privacy requirements.

• Maintain and support implementation of data protection

& privacy policies, procedures, standards, and guidelines.

• Work with business and functional teams to embed data

protection requirements into processes, technology initiatives, and

third-party engagements.

• Coordinate data mapping, data inventories, and

privacy/data protection impact assessments, where applicable.

• Review data handling practices, identify compliance

gaps, and coordinate remediation.

• Support management of data protection risks, privacy

incidents, and personal data breaches in coordination with relevant

stakeholders.

• Maintain required data protection & privacy records

• and documentation and provide periodic compliance updates to management.
• -Support data protection & privacy awareness and
• training initiatives and provide day-to-day guidance to stakeholders.

Cybersecurity

Governance

• Maintain and support the implementation of cybersecurity

policies.

• Support the implementation of cybersecurity standards

and procedures.

• Monitor compliance with established security controls.
• Conduct periodic security governance reviews and track

corrective actions.

• Prepare and report the organization's cybersecurity

posture and key risks to management.

• Coordinate with IT and relevant stakeholders on

cybersecurity risk remediation.

Operations

• Monitor cybersecurity incidents, alerts, and security

monitoring reports.

• Coordinate incident response and remediation activities

with IT and relevant stakeholders.

• Monitor key endpoint, network, and cloud security

controls.

• Coordinate vulnerability identification and timely

remediation.

• Support periodic security assessments and testing.

Cybersecurity Risk Management

-Support cybersecurity and data protection & privacy

risk assessments.

• Maintain the cybersecurity and data risk register.
• Monitor emerging cybersecurity threats and risks.
• Track risk mitigation and remediation activities.
• Report significant cybersecurity risks and outstanding

actions to management.

Identity & Access Management

• Review privileged and critical user accounts.
• Monitor user access governance and periodic access

reviews.

• Coordinate access certification exercises.
• Support least-privilege and segregation-of-duties

requirements.

• Review critical access requests in accordance with

established policies.

Third-Party

Security

• Support assessment of vendor cybersecurity and data

protection & privacy controls.

• Review security and data protection & privacy requirements

in vendor arrangements.

• Coordinate third-party cybersecurity and data protection

& privacy risk assessments.

• Monitor remediation of identified vendor security risks.
• Coordinate with Procurement, Legal, IT, and relevant

business teams on third-party security matters.

IT Operations

& Technology Coordination

• Work closely with the IT team on day-to-day IT

operations, technology risks, and improvement initiatives.

• Coordinate with IT on security, privacy, access,

infrastructure, and other technology controls.

• Participate in IT projects, system changes, incident

management, and remediation activities.

• Support continuous improvement of IT processes,

controls, documentation, and operational practices.

Required

Qualifications & Experience

• Bachelor's degree in Computer Science, Information

Technology, Cybersecurity, Information Security, or a related discipline.

• 5–8 years of relevant experience in cybersecurity,

information security, data protection & privacy, IT risk, compliance,

or a related field.

• Practical experience in data protection & privacy,

• cybersecurity, IT operations, security governance, risk management,
• compliance, or related areas, with the ability to work across both
• governance and operational environments.

• Working knowledge of data privacy principles and

applicable regulations, including the DPDPA.

• Experience with security controls, vulnerability

management, access management, incident response, and third-party risk.

• Good understanding of IT infrastructure, network,

endpoint, cloud, identity, application security, and general IT

operations.

• Relevant certifications such as ISO 27001 or equivalent

cybersecurity/privacy certifications are preferred.

Benefits at CHIREC

• Competitive salary depending upon qualifications and experience
• Lunch on all school-working days
• School transport as per the available bus routes
• Comprehensive Medical Insurance
• Personal accident policy
• Term Life policy
• Professional Development

How to Apply

• Complete the application form available on www.chirec.ac.in before the closing
• date. The Closing Date for Applications is: 30-Sep. -2026
• Cognita Schools are committed to safeguarding and promoting the welfare of
• children and young people and expect all staff, volunteers and other third
• parties to share this commitment. Safer recruitment practice and pre-employment
• background checks will be undertaken before any appointment is
• confirmed.
• We believe having a diverse workforce makes us better, smarter and happier and
• so welcome applicants from all backgrounds, genders, and races. We have an
• unwavering commitment to being fair and equitable in our recruitment
• process.
• EARLY APPLICATIONS ARE ENCOURAGED; WE RESERVE THE RIGHT TO INTERVIEW AND
• APPOINT PRIOR TO CLOSING DATE FOR THE RIGHT APPLICANT.
• Applicants who have not heard from us by the closing date must assume that, on
• this occasion, their application has been unsuccessful.