Manager - Data Protection

The Manager - Data Protection will lead the organization’s efforts to ensure full compliance with data protection regulations, policies, and best practices. This role is pivotal in managing data privacy risks, overseeing implementation of data protection frameworks, and advising internal teams on privacy by design. The ideal candidate will work closely with legal, compliance, IT, and business units to establish and maintain high standards of data governance, particularly in line with UAE data protection laws and international standards like GDPR.

Responsibilities:

• Developing and maintaining the company’s data protection strategy aligned with UAE regulations and global standards.

• Monitoring compliance with data protection laws, policies, and procedures across all departments.

• Conducting regular privacy impact assessments and advising on mitigation strategies.

• Leading investigations and response plans for data breaches and incidents.

• Collaborating with IT and security teams to ensure appropriate technical safeguards are in place.

• Delivering training and awareness programs to educate staff on data protection obligations.

• Reviewing and updating privacy policies, terms of service, and data processing agreements.

• Advising product and service teams on privacy by design and default practices.

• Managing data subject access requests and liaising with regulators when required.

• Ensuring proper recordkeeping of data processing activities in accordance with legal mandates.

Requirements:

• Bachelor’s or Master’s degree in Law, Information Security, or a related field.

• Minimum 7 years of experience in data protection, privacy compliance, or information governance.

• Strong knowledge of UAE data protection laws, GDPR, and other global privacy frameworks.

• Certified Data Protection Officer (C-DPO), CIPP/E or equivalent certification is preferred.

• Experience handling data protection within large enterprises or regulated sectors.

• Familiarity with risk management, incident response, and cybersecurity principles.

• Excellent communication and stakeholder management skills.

• Strong analytical mindset with attention to detail and regulatory compliance.

• Ability to interpret legal and regulatory texts and apply them in a business context.