Legal Executive – Privacy

JOB OBJECTIVE:

The Executive Privacy is responsible for maintaining and enhancing data protection practices. This role ensures compliance with international data protection laws like GDPR, manages data protection policies, conducts audits, logs data breaches, and executes data protection impact assessments.

Additionally, the Executive Privacy develops training materials, monitors compliance, maintains detailed records, and supports third-party vendor assessments. This position is crucial for upholding DET's data privacy standards and regulatory compliance.

KEY ACCOUNTABILITIES

• Actively update and maintain a detailed registry of data protection laws and international privacy regulations applicable to DET, including but not limited to GDPR.
  Assist in drafting and revising DET’s data protection policies to align with evolving legal requirements, providing detailed annotations and version control for policy documents.

• Conduct regular audits of data handling practices across DET’s departments to ensure compliance with privacy laws, documenting audit findings and following up on required actions.

• Log and track data breach incidents and security anomalies, assisting in the initial assessment and categorization of the impact and urgency of incidents.

• Execute detailed components of Data Protection Impact Assessments under the supervision of senior management, including data flow mapping and risk identification.

• Develop and update training materials for data protection awareness sessions, ensuring they reflect the latest privacy standards and regulatory requirements.

• 
  Monitor and report on compliance with data protection policies through regular checks and the use of compliance tracking software.

• Prepare communication drafts for internal stakeholders regarding changes in privacy policies and upcoming compliance activities.

• Maintain records of all data protection activities, including DPIAs, audits, training sessions, and breach incidents, to ensure traceability and regulatory compliance.

• Serve as a first point of contact for internal queries related to data protection practices, escalating complex issues to senior privacy counsel as necessary.

• Assist in assessing and monitoring third-party vendors for compliance with DET’s data protection standards, including performing initial compliance checks and regular follow-ups.

• Support in providing advice and instructions to staff and Data Protection Champions on how to comply with Data Protection policies and procedures including in relation to Data Protection Impact Assessments (DPIAs), Data Subjects Rights requests etc

Qualifications

• Bachelor's degree in Law, Information Technology, Cybersecurity, Data Science, or a related field. MBA is highly preferred.
• Professional certifications such as the Certified Information Privacy Professional (CIPP), Certified Information Privacy Professional/ Europe (CIPP/E), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT); are advantageous.
• Certified by the UAE Ministry of Justice and UAE official entities.
• Experience in data protection, privacy, or a related field.
• Proven track record of managing compliance with data protection laws such as GDPR, HIPAA, or similar regulations.
• Experience conducting data protection impact assessments and audits.