Senior Manager, Data Protection & ESG

Responsibilities

• Design, implement, and maintain the Group’s data protection and ESG compliance frameworks across all local and international entities.
• Act as the formal Data Protection Officer (DPO) and the single point of accountability for personal data processing and ESG reporting.
• Conduct end-to-end regulatory gap assessments and manage multi-year remediation roadmaps.
• Lead the design and implementation of an Enterprise-wide Consent Management (ECM) system.
• Perform Data Protection Impact Assessments (DPIA) and Transfer Impact Assessments (TIA) for new products, AI use cases, and vendor engagements.
• Manage the ESG regulatory obligations register, including climate-related financial disclosures and sustainability reporting.
• Serve as the primary liaison for internal audit and external regulators such as CBUAE, FSRA, and DFSA.
• Design and deliver Group-wide training programs on data protection and ESG for employees and senior management.

Requirements

• 10+ years of experience in data protection, privacy, ESG, or compliance.
• At least 5 years in a dedicated Data Protection Officer (DPO) or ESG lead capacity.
• Extensive experience within the financial services sector.
• Proven expertise with CBUAE, FSRA (ADGM), and DFSA (DIFC) regulations.
• Demonstrated track record in conducting regulatory gap assessments and leading remediation programs.
• Experience implementing Enterprise-wide Consent Management (ECM) capabilities.
• Ability to operate effectively within a multi-entity, multi-jurisdictional group environment.

About the Company

Astra Tech is a leading technology group dedicated to building innovative digital solutions. We operate across multiple jurisdictions, ensuring high standards of compliance and excellence in everything we build.