Loading
R
Staff Data Privacy Engineer
RazorpayBengaluruSenior
Apply Razorpay is one of India’s leading full-stack financial technology companies, powering the way businesses move, manage, and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - we’ve since grown into a fintech powerhouse driving India’s digital payment revolution.
Razorpay powers millions of businesses with a smarter, scalable stack that goes beyond transactions to help them truly build and grow.
From building AI-native agentic payments, to AI-assisted fraud detection and real-time risk intelligence to automated reconciliation, smart payouts, and predictive financial insights, we are embedding intelligence across our stack to make money movement faster, safer, and more efficient. In close collaboration with ecosystem partners - including banks, networks, regulators - we are pioneering industry-first solutions that are shaping the next era of fintech
Across India, Singapore and Malaysia, our products span everything from seamless checkouts to payroll automation - powering a fintech ecosystem that’s redefining how money moves across Asia.
Today, that ecosystem supports everyone from early-stage startups to some of India’s largest enterprises, enabling them to accept, process, and disburse payments at scale while expanding into new ways of managing money more efficiently.
Our scale speaks volumes: Razorpay processes $180+ billion in annualized transactions, powering leading businesses like Airbnb, Facebook, WhatsApp, Airtel, CRED, BookmyShow, Zomato, Swiggy, Lenskart, Mirae Asset Capital markets, Indian Oil, National Pension Scheme - and over 100 of India’s unicorns. With strong roots in India and growing operations in Southeast Asia, we are shaping the next chapter of financial technology across the region.
We are backed by global investors including GIC, Peak XV Partners (formerly Sequoia Capital India & SEA), Tiger Global, Ribbit Capital, Matrix Partners, MasterCard, and Salesforce Ventures, having raised over $740 million to date. Strategic acquisitions - including Ezetap (POS and offline payments), Curlec (Malaysia expansion), BillMe (digital invoicing), and POP (rewards-first UPI) - along with earlier moves in fraud prevention, payroll, and lending, have further strengthened our platform and widened our footprint across Asia.
But what truly sets Razorpay apart is our culture. At Razorpay, ownership is our oxygen - you own what you build, with no micromanagement or red tape, just the runway to make your ideas fly. Learning is a lifestyle - if you’re curious, you’ll feel at home here. People > Pedigree - we hire for attitude, hustle, and hunger more than degrees. Transparency thrives over titles - this is where interns question CXOs and CXOs say “thank you.” Guided by our values of Customer First, Autonomy & Ownership, Agility with Integrity, Transparency, Challenging the status quo and a strong belief that Razorpay grows with Razors, you’ll be part of a 3000+ strong team building not just products, but the financial infrastructure of the future.
Role : Staff Data Privacy Engineer
This is the operational core of Razorpay's privacy function — a senior IC role that translates the Head's strategy into day-to-day technical execution, while directly leading a Lead Compliance Engineer and owning the tooling, assessments, and AI governance pipeline.
This role requires someone who can hold the space between strategy and execution — not just translate the Head's vision downward, but build the actual machinery that makes privacy operations run. As a Staff IC, you will technically lead a Lead Compliance Engineer and own the delivery of everything from AI tool onboarding to DPIA automation. Regulatory fluency is the floor. What differentiates the right candidate is their ability to build, automate, and lead — in an AI-first compliance environment that has no historical playbook.
KEY RESPONSIBILITIES :
A. Privacy Programme Management & Regulatory Operations
- Own the operationalisation of DPDP Act 2023 and GDPR requirements across Razorpay products, systems, and vendor stack — in coordination with the Head.
- Manage and continuously improve the Record of Processing Activities (RoPA), consent framework, data subject rights workflows, and data classification register.
- Lead execution of Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) — with increasing automation over time.
- Oversee cross-border data transfer compliance: SCCs, adequacy decisions, and DPDP cross-border transfer rules.
- Coordinate with the Head for regulatory audits (RBI / SEBI), data privacy reviews, and incident reporting timelines.
- Enforce consent, purpose limitation, data minimisation, and retention policies in live production system
B. Technical Privacy Posture & Assessment Delivery
- Lead and personally conduct infrastructure privacy reviews of cloud environments (AWS / GCP / Azure) — access controls, encryption, data residency, audit logging.
- Drive vendor and SaaS tool assessments beyond standard questionnaires — review actual data flows, API integrations, and technical configurations.
- Own the technical quality of privacy assessments produced by the team — review, calibrate, and ensure
regulatory alignment. - Monitor control effectiveness across production systems; identify gaps and partner with engineering to define remediation.
- Build and maintain the team's assessment methodology, templates, and scoring frameworks.
C. AI Systems Privacy & Governance (LLM-Focused)
- Own Razorpay's AI tool onboarding and privacy review process — from intake to sign-off.
- Lead privacy assessments of LLM-powered tools, internal AI agents, and third-party AI integrations, with focus on data input, storage, retention, and cross-border sharing.
- Build and maintain the AI privacy onboarding framework: checklists, risk registers, approval workflows, and exception management.
- Define and document AI-specific privacy risks: prompt data leakage, model memory, third-party AI provider data usage, and agentic system data access.
- Embed Privacy-by-Design into AI product lifecycles — engaging product and engineering teams from ideation through to inference.
- Track third-party AI provider privacy policies (OpenAI, Anthropic, Google, etc.) and maintain a current compliance alignment register
D. Compliance Automation & AI-Powered Privacy Operations
- Design, build, and maintain AI-assisted compliance workflows — DPIA generation, evidence collection, control testing, and risk flagging.
- Create and maintain compliance dashboards that give engineering, product, and leadership real-time visibility into privacy posture.
- Develop standardised playbooks, checklists, and templates that enable product teams to self-serve privacy reviews with confidence.
- Evaluate and validate the accuracy and regulatory alignment of AI-generated compliance outputs before they are accepted as formal evidence.
- Continuously improve the team's tooling stack — GRC platforms, privacy management tools, AI assistants — for maximum operational leverage.
E. Technical Leadership & Stakeholder Management
- Technically lead, mentor, and develop the Lead Compliance Engineer — Privacy; set clear technical goals, unblock work, and drive their professional growth.
- Act as the primary point of contact for engineering, product, legal, and business teams on day-to-day privacy
matters. - Translate privacy requirements and risk findings into actionable, prioritised guidance for technical and non- technical stakeholders.
- Support the Head with board-level and leadership reporting — prepare data, evidence packages, and risk summaries.
- Maintain the privacy incident register, manage incident response timelines, and ensure regulatory reporting deadlines are met.
- Drive a culture of privacy-as-enabler within the organisation — position compliance as a feature, not a gate.
What will set you apart:
- Hands-on DPDP, GDPR implementation experience
- Building privacy automation tooling from scratch ·
- Prior assessment work on AI or LLM-powered products
- Experience supporting regulatory examinations in a FinTech context.