Senior Manager Group Data Protection And Privacy

Overview

M42 delivers comprehensive healthcare services across the full continuum of care; from primary care to advanced specialty treatments. Leveraging cutting-edge health technologies and precision medicine, we ensure the highest standards of effectiveness, efficiency, and patient-centered outcomes. With a global presence spanning more than 480 facilities in 27 countries and a dedicated workforce of over 20,000 professionals, M42 is uniquely positioned to redefine the future of healthcare on a global scale.

M42 is looking for an experienced and strategic Senior Manager, Group Data Protection & Privacy to lead and transform our enterprise-wide privacy program. This corporate-level leadership role is pivotal in maintaining patient trust, safeguarding sensitive healthcare data, and ensuring compliance with UAE, regional, and international data protection regulations. As the registered Data Protection Officer (DPO), you will shape M42’s Group Privacy Governance Framework, embed privacy-by-design principles across the organization, and position M42 as a benchmark for ethical and compliant data practices in the healthcare sector.

Responsibilities

• Act as the trusted advisor to the organization on all data protection matters, providing clear guidance and strategic recommendations to ensure ongoing regulatory compliance.
• Develop, implement, and continuously enhance robust privacy policies, standards, and procedures in alignment with UAE data protection laws, international frameworks (e.g., GDPR), and applicable healthcare privacy regulations.
• Embed strong privacy governance mechanisms within the broader data governance framework to ensure accountability, oversight, and responsible data handling across the Group.
• Serve as the primary organizational point of contact for data protection matters and the registered Data Protection Officer (DPO) with regulatory authorities (e.g., DOH, ADGM), managing regulatory engagement and correspondence.
• Lead and guide the business in conducting privacy impact assessments (PIAs/DPIAs) and risk assessments, ensuring privacy considerations are integrated into projects, systems, and product development from inception.
• Direct and oversee periodic privacy audits and compliance assessments, identifying gaps and driving corrective and preventive actions.
• Partner with Information Security and IT to support external regulatory inspections and audits (e.g., DOH, ADHICS), ensuring audit readiness and coordinated responses.
• Oversee and enhance processes for managing data subject rights requests, ensuring transparency, accuracy, and timely responses in accordance with applicable laws.
• Ensure comprehensive documentation, reporting, and record-keeping within the M42 Group Data Privacy Management Platform, maintaining regulatory defensibility and operational integrity.
  
  

• Bachelor’s or Master’s Degree from an internationally recognized university (essential).
• Law Degree (preferred).
• 8+ years of experience in data privacy and compliance within the UAE or GCC.
• In-depth knowledge of UAE data protection laws and familiarity with GDPR and international frameworks.
• Strong understanding of IT infrastructure, cybersecurity principles, and audit methodologies.
• Excellent communication and stakeholder management capabilities.