Governance, Risk, and Compliance Data Privacy Officer

We are seeking a seasoned Governance Risk and Compliance Data Privacy Officer to lead and strengthen our data privacy program in the United Arab Emirates. This role will drive privacy governance frameworks, risk management, and regulatory compliance to ensure protection of personal data across our operations.

• Develop, implement, and maintain data privacy policies, procedures, and standards in line with GDPR, UAE Data Protection Law, and other global regulations.
• Design and manage governance frameworks to ensure consistent application of privacy controls across the organization.
• Conduct privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and vendor risk assessments.
• Identify, assess, monitor, and report data privacy risks, incidents, and remediation actions to senior management.
• Collaborate with cross-functional teams to integrate privacy requirements into business processes and technology projects.
• Lead data breach response activities including investigation, notification, and remediation.
• Develop and deliver training and awareness programs on data privacy, risk management, and regulatory compliance.
• Prepare regular reports and dashboards on privacy metrics, compliance posture, and risk trends.

• Bachelor's degree in Law, Information Security, or a related field.
• 5 10 years of professional experience in data privacy, governance, risk management, or compliance roles.
• Technical expertise in data privacy compliance tools, methodologies, and GDPR requirements.
• Proven experience in designing and implementing governance frameworks and risk management processes.
• Strong knowledge of global regulatory compliance requirements including GDPR and UAE Data Protection Law.
• Excellent communication, stakeholder management, and presentation skills.
• Ability to lead privacy impact assessments and manage cross-functional privacy initiatives.

• Professional certifications such as CIPP/E, CIPM, CISM, or CRISC.
• Experience with ISO 27701, ISO 27001 or other information security standards.
• Advanced degree:
  Master’s in Law, Information Security, or related field.
• Prior experience working in multinational organizations or regulated industries.
• Familiarity with local UAE regulatory environment and Data Office requirements.