Job Description & How to Apply Below
About the Role
We are seeking an experienced GRC Data Privacy Officer to lead and enhance our data privacy and protection program in the United Arab Emirates. In this role you will ensure compliance with the UAE PDPL, GDPR, and global privacy frameworks, guide cross-functional teams, conduct risk assessments, and implement controls to safeguard personal data. You will be the subject matter expert driving privacy strategy, policy development, and incident response.
Responsibilities- Develop, implement, and maintain data privacy policies, standards, and procedures aligned with UAE PDPL, GDPR, and other applicable regulations.
- Lead and conduct Data Protection Impact Assessments (DPIAs) for new and existing projects and technologies.
- Monitor and report on privacy compliance metrics, audit findings, and remediation plans.
- Provide expert guidance and training to business units on data privacy requirements, best practices, and breach reporting.
- Oversee data breach response processes, including investigation, notification, and remediation.
- Collaborate with legal, IT, security, and business stakeholders to embed privacy by design into products and services.
- Manage relationships with regulatory authorities and external auditors during privacy assessments and inquiries.
- Maintain records of processing activities and ensure accuracy of data inventories.
- 8–12 years of professional experience in data privacy, data protection, or related GRC roles.
- Deep technical knowledge of UAE PDPL, GDPR, and international data protection frameworks.
- Proven experience conducting DPIAs and privacy risk assessments.
- Strong understanding of data protection technologies, security controls, and privacy by design principles.
- Bachelor’s degree in Law, Information Security, Computer Science, or related field.
- Excellent communication skills with the ability to translate complex privacy requirements into actionable guidance.
- Experience working in or with UAE-based organizations and familiarity with local regulatory environment.
- Master’s degree in Data Privacy, Information Security, Law, or related discipline.
- Certified Information Privacy Professional (CIPP/E, CIPP/A) or Certified Information Privacy Manager (CIPM).
- Experience with ISO/IEC 27701, SOC2, and other privacy/security standards.
- Project management certification (PMP, PRINCE2, or equivalent experience).
- Proficiency in Arabic.
- Experience integrating privacy into cloud, SaaS, and emerging technologies.
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×