Manager – Data Protection

Nationality: Arab countries Nationality

Banking: Preferably within UAE or with specialized expertise in adhering to the CBUAE mandated Consumer Protection and UAE Data Protection Law

Job Purpose

The candidate’s primary role is to implement data protection laws and regulations (like CBUAE Consumer Data Protection, UAE Privacy Laws and applicable global data protection requirements) and advising the business on data protection and privacy matters. He/she will be the focal point for all Data Protection and Privacy regulatory requirement activities. Additionally, the role is required to proactively conduct compliance assessments/audits to ensure compliance and address potential issues.

Key Accountabilities

• Implement and ensure the Bank's policies and procedures are in accordance with data protection laws and regulations (like CBUAE Consumer Data Protection, UAE Privacy Laws and applicable global data protection requirements) and advising the business on data protection and privacy matters.
• Executing bank-wide assessments of data protection and privacy risk assessments, including completion of data protection impact assessments (DPIA) and third-party risk assessments.
• Work with the Contracts, Vendor Management and Compliance/Business departments to ensure that third-party suppliers contracts and operating-level agreements meet privacy requirements.
• Provide support for communications with regulatory authorities and the public concerning privacy issues, including processing data subjects' requests.
• Extensive experience with process modeling, flow chart, sequence & activity diagrams.
• Periodic Senior Management/Regulatory reporting, as and when required.
• Evaluate the existing data protection framework and identify areas of non to partial compliance and rectify any issues.
• Act as the primary point of contact within the organization for members of staff, regulators, and any relevant public bodies on issues related to data protection.
• Maintain an inventory of all personal data stored and data processing activities, including how and why the company collects, shares and uses personal data.
• Determine the enterprise's specific privacy-related requirements and potential vulnerabilities.
• Manage the privacy impact assessment process, in close collaboration with business stakeholders.
• Devise training plans and provide data protection advice and support for members of staff to support and promote a culture of awareness of data security throughout the bank.
• Promote a culture of data protection compliance across all units of the Bank.
• Conduct regular privacy policy compliance assessments to ensure that business units, technology teams and third-party service providers adhere to the program requirements, and address privacy concerns.

Key Skills

• Subject Matter expertise in data protection laws and regulations (like CBUAE Consumer Data Protection, UAE Privacy Laws and applicable global data protection requirements).
• Certification related to CIPP/E, CIPM, CIPT, CDPO, etc. are preferred.
• Strong knowledge of information Security and IT Systems.

Minimum Experience

Minimum 8 to 10 Years working experience in a similar function and Data Protection or Privacy fields.

Language Skills

• Strong in both oral and written: English and Arabic.