Role : Senior Manager
- Data Privacy Governance
Location : Abu Dhabi
Role
Purpose:
To lead the data privacy governance pillar of ADIB's Data Privacy Function within the Group Information Security Department (GISD), by designing, implementing and continuously improving the Bank's privacy governance framework - policies, standard operating procedures, records of processing, privacy risk management and regulatory reporting.
The role ensures that ADIB, its subsidiaries and branches process personal data in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), CBUAE Consumer Protection Regulation & Standards and other applicable local and international data protection requirements, and provides assurance to Senior Management, Board Committees and regulators on the effectiveness of the privacy control environment.
Key Accountabilities of the role Privacy Governance Framework- Own, draft and maintain the Data Privacy Framework, Policy, Standards, SOPs and supporting templates, including version control, approval workflows and periodic review cycles.
- Maintain the regulatory obligation register and mapping of PDPL, CBUAE and other applicable requirements to internal controls, and ensure the supporting evidence library is complete and audit-ready.
- Oversee the Record of Processing Activities (RoPA) program end to end
- Business Unit onboarding, completeness and quality review, escalation and periodic refresh - ensuring consistency across all ADIB jurisdictions. - Govern the privacy management platform (One Trust) as the single source of truth for RoPA, assessments, consent and incident records.
- Govern the privacy risk management process, including risk identification, assessment, mitigation, and recording of residual risk in the Bank's GRC tool (Archer) in line with the Operational Risk Management framework.
- Lead the governance of Data Protection Impact Assessments (DPIA) and International Data Transfer Assessments, including review, challenge and sign-off of business submissions.
- Define, monitor and report privacy KPIs and KRIs, and prepare reporting packs for Senior Management, the CISO, Management Risk Committee and Board-level committees.
- Oversee governance of data subject rights handling, consent management and privacy notices across customer, employee, candidate and vendor channels (web, mobile app, branches, contact centre and forms).
- Ensure privacy notices and consent mechanisms are accurate, tailored by data subject type, and available in English and Arabic.
- Govern privacy due diligence over third parties in coordination with TPRM and Procurement, and ensure Data Processing Agreements and transfer safeguards are in place before onboarding.
- Assess controller / processor / joint controller roles and advise on the corresponding contractual obligations.
- Support the DPO in the governance of personal data breach management, including root cause review, lessons learned and regulatory notification decisions.
- Act as a key point of contact for internal audit, external auditors, consultants and regulators on privacy governance matters, and coordinate management responses and remediation plans.
- Design and deliver Group-wide and role-specific privacy awareness and training programs.
- Provide guidance, coaching and technical direction to privacy analysts and Business Unit privacy champions, and deputize for the DPO where required.
- Expert knowledge of the UAE Personal Data Protection…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).