data privacy officer

Ernest Talent

The Data Privacy Officer (DPO) is responsible for overseeing Sadad's data protection strategy and its implementation to ensure compliance with applicable data privacy laws and regulations, including the Qatar Data Privacy Law and Qatar Central Bank (QCB) guidelines. This role involves advising business units on data privacy matters, assessing compliance, identifying and mitigating data privacy risks, and serving as the primary liaison with regulatory authorities.Key Responsibilities:1. Ensuring Compliance with Data Privacy and Protection Regulations2. Conducting Data Protection Impact Assessments to identify and mitigate risks.3. Developing and Implementing Privacy Policies and Procedurea) Identification of all data processed within the organization.b) Data classification.c) Data mapping exercises.d) Data process ownership.e) Data masking standards.f) Data retention guidelines, data backup up and disaster recovery.g) Data security policy and procedure.h) Third Party data protection controls.i) Secure data transfer procedures.4. Training Employees on Data Privacy5. Responding to Data Breaches - must coordinate the response, mitigate damage, notify authorities if required, and implement measures to prevent future breaches.6. Monitoring Data Processing Activities - ensuring that data collection, storage, and sharing practices comply with privacy laws.7. Reporting on the data privacy activities and compliance status to the CEO8. Acting as a Liaison with Regulatory Authorities9. Maintaining Records &ndash; to maintain records of all data processing activities carried out by the organizationQualifications:<ul><li>Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>Preference for candidates with specialized certifications such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT).</li><li>At least 5 years of experience in privacy management, data protection, or a related data governance role. Experience in the banking or digital payment industry is preferred.</li></ul>Job Type: Full-time

Data Privacy Officer (DPO)

Parkonic Parking Systems and Management LLC

Role OverviewWe are seeking a dedicated Data Privacy &amp; Protection Specialist to join our team within the hospitality, valet, and transport industry. This role focuses on ensuring the confidentiality, integrity, and security of sensitive data in compliance with relevant privacy regulations. The ideal candidate will drive data protection strategies, conduct risk assessments, and foster a culture of privacy awareness across the organization.Responsibilities:- Develop, implement, and maintain data privacy policies and procedures in alignment with legal and regulatory requirements.- Monitor compliance with data protection laws such as GDPR, CCPA, and other applicable regulations.- Conduct regular data privacy impact assessments and audits to identify and mitigate risks.- Collaborate with IT, legal, and operational teams to ensure secure data handling and storage practices.- Provide training and awareness programs for employees on data privacy and protection best practices.- Respond to data privacy incidents and coordinate remediation efforts.- Maintain records of data processing activities and manage data subject rights requests.- Stay current with emerging data protection laws, trends, and best practices relevant to the hospitality and transport sectors.Requirements-<ul><li>- Bachelor's degree in Information Security, Law, IT, or a related field.</li><li>- Proven experience in data privacy and protection, preferably within hospitality, transport, or related industries.</li><li>- Strong knowledge of data protection regulations such as GDPR, CCPA, and others.</li><li>- Excellent analytical and problem-solving skills with keen attention to detail.</li><li>- Ability to work collaboratively across departments and influence without direct authority.</li><li>- Strong communication skills to effectively train and engage employees on privacy matters.</li><li>- Certifications such as CIPP/US, CIPP/E, or CIPM are a plus.</li><li>- High ethical standards, integrity, and commitment to maintaining confidentiality.</li></ul>Job Type: Full-timePay: AED10,000.00 - AED12,000.00 per monthApplication Question(s):<ul><li>Are you available to join immediately?</li><li>How many years of Information Technology experience do you have?</li></ul>Experience:<ul><li>Data Privacy &amp; Protection: 3 years (Preferred)</li></ul>Language:<ul><li>Arabic (Preferred)</li></ul>Work Location: In person

Data Privacy & Protection Specialist

Legal Route - Global Legal Recruitment

Overview This global health care group is seeking a talented and dynamic counsel to join and lead the Data Protection legal team for this arm of their business. The role involves advising across the business on various legal risks and obligations under data protection and regulatory laws across the MENA region and beyond. The role is a great opportunity for any candidate who is keen to tackle some of today's toughest and important legal challenges in this cutting-edge area of law. You must have flexibility to adapt to changing priorities and organizational needs. In addition, you must have the ability to operate independently in a small but growing international legal team, working on issues in a vibrant, fast-paced environment. This role will provide strategic and tactical legal counseling to internal legal, product, operations and business teams on a range of privacy, data protection, and security related legal and compliance initiatives and disputes for the group of companies. This role will also be responsible for developing and maintaining relationships with data protection regulators throughout both the Middle East and globally. This is a full-time position based in Abu Dhabi. Responsibilities <ul><li>Assist healthcare product lawyers in evaluating the impact of privacy laws, regulatory guidance and enforcement actions, and other related guidelines on product features</li><li>Support members of the legal, business, and policy teams on privacy and security-related legal matters, including areas related to partnerships, acquisitions, integrations, and other business development opportunities</li><li>Develop regulatory strategy in connection with new product features and initiatives, and coordinate responses to inquiries from data protection regulators in those regions</li><li>Drive high-profile and high-impact projects involving privacy analysis and compliance with stakeholders across the business, policy, legal, communications, security, and other departments</li><li>Work with the wider legal team on regulatory and data protection matters</li><li>Help draft and oversee the development and management of the business (and its affiliates') terms and data policies across the full range of the healthcare providers' different products</li><li>Help develop and conduct general and role-specific data protection trainings across the business</li></ul> Minimum Qualifications <ul><li>8+ years of legal experience, including at a law firm and/or prior in-house experience with internet or technology companies (applicable regulatory, or product counseling will be considered)</li><li>Experience with global privacy laws, regulations, and industry guidelines, especially including those relevant for the healthcare environment</li><li>Lawyer qualified to practice law in at least one jurisdiction in the Middle East. (UK / US / Australia / Canada and Ireland etc)</li><li>Ability to prioritize work and provide advice under deadlines</li><li>Business judgment and client counseling experience</li></ul> Preferred Qualifications <ul><li>In-depth knowledge of legal issues in the area of healthcare / medical devices / laboratories including an excellent understanding of regional or country specific data protection laws in the Middle East and/or globally</li><li>Industry or government experience working directly with data protection authorities in the Middle East and/or Africa</li><li>Experience in driving and managing large-scale data protection projects across multiple jurisdictions is a plus</li><li>Excellent problem-solving, written and oral communication and interpersonal skills</li></ul>

Data Protectio / Regulatory Lawyer - Health Care Group - Abu Dhabi

Paytm Money

<div>
 
 
 Role Overview:
 
 
 
 
 
 
 We are seeking an experienced Data Protection and Privacy Manager, who will be responsible for overseeing the organization's data protection strategy and ensuring compliance with Indian laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill.The DPPM will work closely with DPO and regulatory authorities to ensure that sensitive data is processed securely and ethically. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards and law.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 
 Legal Compliance:
 
 Ensure adherence to data protection laws, including local DPDPA, IT Act and international regulations like GDPR.
 </li>
 <li>
 
 Policy Development:
 
 Formulate and implement data protection policies and guidelines across the organization.
 </li>
 <li>
 
 Data Breach Management:
 
 Investigate and report data breaches to relevant authorities within the stipulated timeframe.
 </li>
 <li>
 
 Training &amp; Awareness:
 
 Conduct training sessions for employees on data protection practices and raise awareness about privacy policies.
 </li>
 <li>
 
 Impact Assessments:
 
 Perform Data Protection Impact Assessments (DPIA) to identify risks and recommend mitigation strategies.
 </li>
 <li>
 
 Grievance Redressal:
 
 Act as the point of contact for data principals (individuals) for grievances related to data handling or privacy violations.
 </li>
 <li>
 
 Recordkeeping:
 
 Maintain records of all data processing activities and policies for audit and regulatory purposes.
 </li>
 <li>
 
 Liaison:
 
 With regulatory agencies and stakeholders regarding data protection matters.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 
 
 
 <ol>
 <li>
 Bachelor's degree in Information Security, Computer Science, and Law.
 </li>
 <li>
 Certification in Data Protection or Privacy Management is mandatory, like - CIPM, CDPSE, DCPLA, DCPP and DCDPO
 </li>
 <li>
 8-10 years of experience in security management.
 </li>
 <li>
 Strong understanding of IT infrastructure , data security best practices, and frameworks.
 </li>
 <li>
 Familiarity with regulatory requirements and compliance standards (e.g., RBI, SEBI).
 </li>
 <li>
 Excellent communication, interpersonal, analytical and leadership skills.
 </li>
 <li>
 Knowledge of emerging technologies, their impact on data protection and ability to handle sensitive information discreetly.
 </li>
 </ol>
 
 
</div>

Data Protection and Privacy Manager

Wajda International Technology Services

Job Title:Data Protection Officer (DPO) / Data Protection ConsultantLocation:[Bahrain / Saudi Arabia / Hybrid]Position Type:Full-Time / ConsultancyMandatory Language:Arabic read and writeRole SummaryThe Data Protection Officer (DPO) / Consultant is responsible for leading, advising, and ensuring organizational compliance with applicable data protection and privacy laws in Bahrain and the Kingdom of Saudi Arabia, including the Bahrain Personal Data Protection Law and the Saudi Personal Data Protection Law (PDPL), along with international best practices. The DPO will act as the primary liaison with regulatory authorities, company leadership, and internal stakeholders to establish and maintain robust data protection governance, risk management, and compliance frameworks.This role combines strategic oversight, regulatory compliance management, and operational data protection functions to safeguard the rights of data subjects and the organization&rsquo;s adherence to applicable legal requirements.Key Responsibilities1. Regulatory Compliance &amp; Governance<ul><li>Lead and oversee the design, implementation, assessments and maintenance of data protection frameworks and governance structures in line with Bahrain and Saudi data protection laws and regulations.</li><li>Monitor and interpret changes in data protection legislation, regulatory guidance, and industry best practices; advise senior management on compliance implications.</li><li>Ensure that personal data processing activities across the organization comply with applicable legal requirements.</li></ul>2. Policy Development &amp; Implementation<ul><li>Understanding of Bahraini and Saudi Data privacy Laws</li><li>Develop, review, and enforce data protection policies, procedures, guidelines, and standards, ensuring alignment with legal requirements (e.g., cross-border data transfer controls, data retention, purpose limitation, and privacy notices).</li></ul>3. Data Protection Impact Assessments (DPIAs) &amp; Risk Management<ul><li>Lead DPIAs for high-risk processing activities and ensure appropriate mitigation strategies are implemented.</li><li>Conduct regular risk assessments, compliance audits, and gap analyses to evaluate the organization&rsquo;s data protection posture and identify improvement opportunities.</li></ul>4. Regulatory Liaison &amp; Reporting<ul><li>Serve as the official point of contact between the organization and relevant data protection authorities (e.g., Bahrain Data Protection Authority and Saudi Authority for Data &amp; AI / SDAIA).</li><li>Prepare and submit mandatory notifications &mdash; including breach reports, compliance reports, and regulatory filings &mdash; according to legal requirements.</li></ul>5. Data Subject Rights Management<ul><li>Establish and manage processes for responding to data subject requests (access, correction, deletion, objection) in accordance with legal timelines and standards.</li><li>Oversee complaint handling and ensure timely and compliant responses to data subject inquiries.</li></ul>6. Incident &amp; Breach Response<ul><li>Develop and maintain an effective data breach response plan, including breach detection, containment, forensic investigation, notification to regulators and affected individuals as required.</li></ul>7. Training &amp; Awareness<ul><li>Design and deliver comprehensive data protection training programs to employees, contractors, and business partners to enhance awareness of privacy obligations and foster a culture of compliance.</li><li>Provide ongoing support and consultation to business units on data protection matters.</li></ul>8. Documentation &amp; Recordkeeping<ul><li>Ensure up-to-date maintenance of records of processing activities (RoPA), data inventories, program documentation, audit reports, and compliance evidence.</li></ul>Qualifications &amp; ExperienceEducation<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Law, Information Security, Cybersecurity, Data Privacy, IT Governance, or related field.</li></ul>Experience<ul><li>2+ years of experience in data protection, privacy compliance, or information security roles.</li><li>Prior experience as a DPO, privacy manager, or senior data compliance role is highly desirable.</li></ul>Skills &amp; Certifications<ul><li>In-depth knowledge of Bahrain and Saudi data protection laws and compliance requirements (Bahrain PDPL, Saudi PDPL).</li><li>Professional certifications such as CIPP/E, CIPP/A, CIPM, CDPO, or equivalent are highly desirable.</li><li>Strong understanding of privacy principles (data minimization, lawful basis for processing, privacy by design).</li><li>Excellent analytical, communication, and stakeholder management skills.</li><li>Ability to synthesize legal and technical requirements into actionable compliance programs.</li></ul>Key Competencies<ul><li>Regulatory interpretation and compliance strategy.</li><li>Risk assessment and mitigation planning.</li><li>Cross-functional collaboration (legal, IT, security, operations).</li><li>Reporting and documentation excellence.</li><li>Independent judgement and ethical decision-making.</li></ul>Reporting Line<ul><li>Reports to: Senior Manager Consulting (as stipulated for independence in data protection reporting).</li></ul>Benefits<ul><li>Competitive compensation package.</li><li>Opportunity to shape and lead data protection compliance across key GCC jurisdictions.</li><li>Exposure to cross-border regulatory frameworks and digital transformation initiatives</li></ul>Job Type: Full-time

Data Proctection Officer

Aristocrat

<div>At Aristocrat, we are driven by our mission to bring happiness to life through the power of play. As a global leader in gaming content and technology, we are dedicated to crafting outstanding experiences for our customers and players. Our culture fosters innovation, collaboration, and a dedication to excellence. We believe in empowering our employees to achieve their best and make a meaningful impact. Join us as the Counsel and Senior Director, Privacy, and take on a pivotal role in crafting our global privacy programs!
What You'll Do<ul><li>
Function as a legal associate for the Company&rsquo;s privacy initiative as instructed by the Chief Privacy Officer.</li><li>
Offer exact and timely legal assistance regarding international privacy risks and requirements, covering data protection, data security, marketing, advertising, and data analytics.</li><li>
Interpret and advise business units on relevant privacy laws and regulations.</li><li>
Promote seamless teamwork and become an essential strategic partner to the business, aiding in their strategic goals and objectives.</li><li>
Coordinate the creation, implementation, and modification of global privacy policies and procedures.</li><li>
Lead or support in handling disputes and legal matters concerning data protection and privacy.</li><li>
Find opportunities for program enhancements and guarantee flawless execution.</li><li>
Take charge or support in privacy-related data breach incidents.</li><li>
Build and deliver educational presentations and tools relevant to global privacy issues.</li><li>
Work on special projects requiring in-depth evaluation of variable factors.</li><li>
Analyze privacy issues impacting the business, evaluate options, and recommend mitigating actions.</li><li>
Support and role model the Legal &amp; Compliance Team&rsquo;s Drive to Thrive strategy.</li><li>
Deliver timely and solution-focused legal services while managing cash flow and achieving budget targets.</li><li>
Operate as a sustainability champion by providing advice and counsel to our business clients.</li><li>
Manage external counsel resources.</li><li>
Champion honesty, integrity, and responsible corporate behavior by nurturing a compliance culture within the organization.</li><li>
Lead and coordinate with cross-functional teams to support business growth and product development with global privacy compliance strategies.</li></ul>
What We're Looking For<ul><li>
A Juris Doctorate from an accredited law school and a member in good standing with a State Bar in the United States.</li><li>
10+ years experience in data protection, privacy, cybersecurity, regulatory compliance, or a reated field, including at least 5+ years of pertinent privacy or cybersecurity expertise.</li><li>
CIPP/US, CIPP/T, or other privacy or cybersecurity certifications are desirable.</li><li>
Advanced working knowledge of US and international privacy law, including GDPR, CCPA, COPPA, and state data protection laws.</li><li>
Familiarity with new technology, such as marketing, focused advertising, and data analysis.</li><li>
Capability to operate independently and collaborate across departments, impacting and establishing successful connections across all levels.</li><li>
Outstanding business judgment, analytical skills, and project management experience.</li><li>
Experience in the gaming industry is preferred.</li><li>
Capability to thrive in a dynamic, high-energy setting and adjust to evolving priorities.</li><li>
Highest level of integrity and recognition of standards required by a regulated business.</li><li>
Passion for continuous learning and professional development.</li><li>
Confidently serving as the face of the privacy team to senior executive management and stepping in for the Chief Privacy Officer when necessary.</li></ul>
Why Aristocrat?
Aristocrat is a world leader in gaming content and technology, and a top-tier publisher of free-to-play mobile games. We deliver great performance for our B2B customers and bring joy to the lives of the millions of people who love to play our casino and mobile games. And while we focus on fun, we never forget our responsibilities. We strive to lead the way in responsible gameplay, and to lift the bar in company governance, employee wellbeing and sustainability. We&rsquo;re a diverse business united by shared values and an inspiring mission to bring joy to life through the power of play.
We aim to create an environment where individual differences are valued, and all employees have the opportunity to realize their potential. We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V<ul><li>
World Leader in Gaming Entertainment</li><li>
Robust benefits package</li><li>
Global career opportunities</li></ul>
Our Values<ul><li>
All about the Player</li><li>
Talent Unleashed</li><li>
Collective Brilliance</li><li>
Good Business Good Citizen</li></ul>
Travel Expectations
Up to 25%
Pay Range
$250,000 - $325,000 per year
Our goal is to pay a market competitive salary focusing near the median of our pay ranges. However, final offers for all positions will be based on several factors such as experience level, education, skills, work location, and internal pay equity.
This position offers a comprehensive benefits package, including health, dental, and vision insurance, paid time off, and a 401(k) plan with employer matching, more details available at https://atibenefits.com/.
Additional Information<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div>
At this time, we are unable to sponsor work visas for this position. Candidates must be authorized to work in the job posting location for this position on a full-time basis without the need for current or future visa sponsorship.</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>

Counsel & Senior Director, Privacy

Stitch

Job Title: Cyber Security Officer &ndash; Compliance, Risk &amp; CryptographyLocation: United Arab EmiratesExperience Level: 8+ yearsDepartment: Information Security / Risk &amp; ComplianceReports To: Chief Information Security Officer (CISO) / Head of Security GovernancePosition OverviewWe are seeking a seasoned Cyber Security Officer to lead and maintain our organization&rsquo;s information security, compliance, and cryptographic infrastructure. The ideal candidate will bring deep expertise in PCI DSS, ISO 27001, SOC 1 &amp; 2, and privacy-related standards, combined with a strong understanding of SAMA Cyber Security Framework (CSF), NCA ECC and CCC, and Sarie security controls.This role will drive cybersecurity strategy, governance, and architecture, ensuring the organization&rsquo;s systems, data, and payment infrastructure remain secure, compliant, and resilient to emerging threats.Key ResponsibilitiesInformation Security Governance &amp; Strategy<ul><li>Develop and maintain the organization&rsquo;s cybersecurity strategy, roadmap, and governance framework.</li><li>Define, implement, and maintain security policies, standards, and procedures in alignment with international best practices (ISO, PCI, NIST).</li><li>Lead risk assessments, gap analyses, and develop mitigation strategies across business units.</li><li>Oversee internal and external cybersecurity audits and coordinate responses and remediation.</li><li>Report key risk and compliance metrics to executive management and regulatory stakeholders.</li></ul>Compliance &amp; Certifications<ul><li>Maintain and ensure ongoing compliance with:</li><li>PCI DSS (including PCI PIN and P2PE)</li><li>ISO 27001, SOC 1 &amp; SOC 2, ISO 27701 (Privacy Information Management)</li><li>SAMA Cyber Security Framework (CSF) and NCA ECC/CCC</li><li>Sarie and UAE Central Bank regulatory requirements</li><li>Oversee audit readiness, manage evidence collection, and coordinate with QSA and internal audit teams.</li><li>Drive continuous improvement in security maturity and compliance posture.</li></ul>Cryptography &amp; Key Management<ul><li>Manage HSM operations, cryptographic key generation, rotation, and destruction procedures in compliance with PCI PIN and PCI DSS.</li><li>Maintain Key Management Systems (KMS) and enforce strict segregation of duties and dual control mechanisms.</li><li>Develop and review Key Management Policies (KMP) and ensure secure storage, handling, and lifecycle documentation.</li><li>Support encryption architecture, ensuring data confidentiality and integrity across systems and payment channels.</li></ul>Cybersecurity Architecture &amp; Operations<ul><li>Define and maintain cybersecurity architecture and ensure integration of secure design principles across IT and fintech platforms.</li><li>Collaborate with infrastructure, DevOps, and product teams to embed security by design in new systems and applications.</li><li>Evaluate and implement security tools such as SIEM, DLP, IAM, EDR, and vulnerability management solutions.</li><li>Lead incident response and root cause analysis (RCA) for major security events and ensure lessons learned are institutionalized.</li></ul>Internal Audit &amp; Risk Management<ul><li>Conduct periodic internal audits of critical systems, data flows, and control environments.</li><li>Identify control gaps and lead remediation plans in coordination with technology and compliance teams.</li><li>Support third-party risk assessments, ensuring vendors adhere to corporate and regulatory security standards.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in information security, Computer Science, or related field</li><li>8+ years of experience in cybersecurity, compliance, and information security governance, preferably in fintech, banking, or payment processing.</li><li>Proven expertise in maintaining compliance with PCI DSS, PCI PIN, ISO 27001, SOC 1 &amp; 2, ISO 27701, and related privacy standards.</li><li>Strong working knowledge of SAMA CSF, NCA ECC/CCC, and Sarie frameworks in the GCC context.</li><li>Hands-on experience with HSMs (Thales, Utimaco, SafeNet, etc.), cryptographic key management, and secure key ceremonies.</li><li>Familiarity with cybersecurity architecture, risk management, and threat mitigation frameworks (NIST CSF, CIS, ISO 27005).</li><li>Strong understanding of network security, encryption standards, incident response, and vulnerability management.</li><li>Excellent communication, leadership, and stakeholder management skills.</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Auditor, PCI ISA / QSA.</li><li>Experience working with financial regulators in the GCC and managing multi-audit environments.</li><li>Exposure to Cloud Security (ISO 27017/27018, CSA CCM) and privacy regulations (GDPR, DIFC, ADGM DP Law).</li><li>Strong presentation and executive reporting capabilities.</li></ul>Key Performance Indicators (KPIs)<ul><li>Audit and certification renewal success rate (PCI DSS, ISO, SOC, etc.)</li><li>Security incident rate reduction and MTTR (Mean Time to Resolve)</li><li>Compliance gap closure and risk mitigation timelines</li><li>Security architecture and roadmap maturity level improvements</li><li>Stakeholder satisfaction and regulatory compliance audit outcomes</li></ul>Job Type: Full-time

cyber security officer

Search 10000+ Data privacy officer jobs near you this January. New roles added regularly across leading industries. Apply today.