Data Protection Officer (DPO)

Responsibilities

• Ensure compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL) and CBUAE requirements
• Develop and maintain data protection policies, standards, and procedures
• Advise senior management on data protection obligations and risk exposure
• Support Privacy-by-Design and Privacy-by-Default across systems and processes
• Oversee data subject rights management including access, correction, and erasure requests
• Lead assessment and response to data breaches and privacy incidents
• Conduct Data Protection Impact Assessments (DPIAs) and maintain Records of Processing Activities (RoPA)
• Review and approve Data Processing Agreements (DPAs) and manage cross-border data transfers
• Drive organization-wide data privacy awareness and training programs
• Act as the primary point of contact with the UAE Data Office and other regulators

Requirements

• Bachelor’s degree in Law, Information Security, Risk, Compliance, or related discipline
• 8–12 years of experience in data protection, privacy, or information governance
• Experience handling sensitive, financial, and health-related personal data

Preferred Qualifications

• Prior experience in Insurance or BFSI sector
• ISO/IEC 27001 Lead Auditor / Implementer certification
• CIPP/E, CIPP/A, CIPM, or equivalent privacy certifications