privacy officer

Ernest Talent

<p>The Data Privacy Officer (DPO) is responsible for overseeing Sadad's data protection strategy and its implementation to ensure compliance with applicable data privacy laws and regulations, including the Qatar Data Privacy Law and Qatar Central Bank (QCB) guidelines. This role involves advising business units on data privacy matters, assessing compliance, identifying and mitigating data privacy risks, and serving as the primary liaison with regulatory authorities.</p><p><b>Key Responsibilities:</b></p><p>1. Ensuring Compliance with Data Privacy and Protection Regulations</p><p>2. Conducting Data Protection Impact Assessments to identify and mitigate risks.</p><p>3. Developing and Implementing Privacy Policies and Procedure</p><p>a) Identification of all data processed within the organization.</p><p>b) Data classification.</p><p>c) Data mapping exercises.</p><p>d) Data process ownership.</p><p>e) Data masking standards.</p><p>f) Data retention guidelines, data backup up and disaster recovery.</p><p>g) Data security policy and procedure.</p><p>h) Third Party data protection controls.</p><p>i) Secure data transfer procedures.</p><p>4. Training Employees on Data Privacy</p><p>5. Responding to Data Breaches - must coordinate the response, mitigate damage, notify authorities if required, and implement measures to prevent future breaches.</p><p>6. Monitoring Data Processing Activities - ensuring that data collection, storage, and sharing practices comply with privacy laws.</p><p>7. Reporting on the data privacy activities and compliance status to the CEO</p><p>8. Acting as a Liaison with Regulatory Authorities</p><p>9. Maintaining Records &ndash; to maintain records of all data processing activities carried out by the organization</p><p><b>Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>Preference for candidates with specialized certifications such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT).</li><li>At least 5 years of experience in privacy management, data protection, or a related data governance role. Experience in the banking or digital payment industry is preferred.</li></ul><p>Job Type: Full-time</p>

Data Privacy Officer (DPO)

Vodafone

<div><div><div><div><h2 class="jobSectionHeader"><b>Join Us</b></h2>
</div><div><p>
At Vodafone, we&rsquo;re not just shaping the future of connectivity for our customers &ndash; we&rsquo;re shaping the future for everyone who joins our team. When you work with us, you&rsquo;re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Accountabilities &amp; Decision Ownership</b></h2>
</div><div><ul><li>Lead the design, implementation, and continuous improvement of a comprehensive global privacy compliance program aligned with GDPR, CCPA, HIPAA, and emerging regulations.</li><li>
Develop and execute a privacy risk management framework, including advanced risk identification, analysis, mitigation, and reporting.</li><li>
Provide strategic counsel to executive leadership and business units on privacy implications of new products, services, mergers/acquisitions, and digital transformation initiatives.</li><li>
Champion a privacy-by-design approach, embedding privacy controls early in the development lifecycle and operational processes.</li><li>
Oversee and conduct complex privacy audits, gap analyses, and third-party assessments to ensure vendor compliance and contractual protections.</li><li>
Lead investigations and responses to data breaches and regulatory inquiries, coordinating remediation and communication plans.</li><li>
Mentor and develop a high-performing privacy team, fostering professional growth and knowledge sharing.</li><li>
Collaborate closely with Legal, IT Security, Compliance, and Data Governance teams to align privacy with broader risk and compliance strategies.</li><li>
Drive organization-wide privacy awareness campaigns, training programs, and cultural change initiatives.</li><li>
Report privacy performance metrics and compliance status to the board, audit committees, and regulatory bodies.</li><li>
Stay at the forefront of privacy trends, emerging threats, and regulatory updates, proactively adapting company policies and procedures.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Core Competencies, Knowledge, and Experience</b></h2>
</div><div><ul><li>Bachelor's Degree in Law, Engineering, or any relevant field.</li><li>
Technical background is a must,</li><li>
Data Privacy experience is preferable.</li><li>
Minimum 3 years of experience in relevant field.</li><li>
Strong communication and interpersonal skills</li><li>
Accuracy and precision</li><li>
Analytical and problem solving skills</li><li>
Time management</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Who we are</b></h2>
</div><div><p>
We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.</p><p>
Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.</p><p>
If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.</p><p>
Together we can.</p></div></div></div></div>

Data Privacy Compliance Sr. Specialist

Stack Overflow

<div><div><p><b>Every developer has a tab open on Stack Overflow.</b></p>
<p>
We are one of the most popular websites in the world - a community-based space focused on increasing productivity, decreasing cycle times, accelerating time to market, and protecting institutional knowledge.</p>
<p>
Innovation is at the heart of everything we do. We embrace collaboration, transparency, and believe in leading with empathy; creating an environment where every Stacker knows they belong. We embrace that the unique contributions and points of view of all Stackers contribute to our success.</p>
<p>
We are a <b>Best Company to Work For</b>, in addition to being recognized for Best Company Leadership, Best Company Happiness, Best Company Perks and Benefits, Best Company Work-Life Balance, Best Company Compensation, and Best Company Outlook.</p>
<p>
We are a remote-first company with Hiring HUBs based in the US, Canada, UK, and Germany.</p></div><p>
Stack Overflow is looking for a high caliber, experienced, and creative privacy attorney to join the legal team. We are looking for someone experienced to join as a true strategic partner and build trust with those around them. This individual will report into the Chief Legal Officer.</p>
<h1 class="jobSectionHeader"><b>
Job Responsibilities</b></h1>
<ul><li>Support the business (product, engineering, etc.) to build trustworthy, privacy-first products and services, by working closely with product and engineering to advise on the management and use of data, including privacy matters related to EdTech, Advertising, and data governance.</li>
<li>Support our public community platform and Ads and Stack Overflow for Teams businesses.</li>
<li>Provide subject matter expert advice in connection with regulatory investigations, individual complaints and enquiries received related to GDPR, the management of GDPR individual data subject access rights requests and data retention.</li>
<li>Provide subject matter expert advice across all aspects of global privacy law and regulation.</li>
<li>Support product lawyer in evaluating impact of privacy laws, regulatory guidance and enforcement actions, and other related guidelines on new and existing products and features.</li>
<li>Develop and maintain subject matter expertise in areas of data use and protection laws and advising the impact of the same on Stack's business</li>
<li>Structure, draft, review, and negotiate data protection terms in a variety of commercial agreements including master service agreements and DPAs.</li>
<li>Collaborate with and support the InfoSec team to obtain and maintain security certifications.</li>
</ul><h1 class="jobSectionHeader"><b>Representative Duties</b></h1>
<ul><li>Support members of the Product and Engineering teams to advise on all privacy related matters for all products.</li>
<li>Drive the completion of multiple tasks and responsibilities in a fast-paced and high energy environment.</li>
</ul><h1 class="jobSectionHeader"><b>Qualifications (knowledge, skills and abilities)</b></h1>
<ul><li>Bachelor's Degree required</li>
<li>Juris Doctor (JD) Degree from an accredited law school</li>
<li>Membership with good standing in at least one U.S. State Bar</li>
<li>6+ years of legal practice experience. In-house legal experience preferred</li>
<li>Capable of interacting with, and establishing the respect and confidence of, senior business leaders</li>
<li>Business-oriented problem solver and a flexible team player, with ability to partner across departments in order to provide legal support that will enable teams to do business effectively</li>
<li>Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels</li>
<li>Demonstrable experience in advising clients on privacy matters and legislation, Ads, and global privacy laws &amp; regulations (including GDPR, CCPA/CPRA, GLBA, and other international data protection frameworks)</li>
<li>Significant experience drafting and negotiating data protection terms in commercial contracts</li>
<li>Global thinker and demonstrated collaborator, who displays sound and pragmatic legal and business judgment in providing practical advice to clients on privacy and data protection issues</li>
<li>Ability to translate legal advice into actionable policies, processes and programs that enable business objectives</li>
</ul><h1 class="jobSectionHeader"><b>Physical Demands</b></h1>
<p>
The physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. In accordance with the Americans with Disabilities Act, as amended, the California Fair Employment &amp; Housing Act, and all other applicable laws, Stack Overflow provides reasonable accommodations for qualified persons with disabilities. A qualified individual is a person who meets skill, experience, education, or other requirements of the position, and who can perform the essential functions of the position with or without reasonable accommodation.</p>
<ul>
<li>Considerable time is spent at a desk using a computer terminal</li>
<li>Ability to travel to various locations</li>
<li>Attending conferences or training sessions</li>
<li>Speak/Listen via headset for a considerable amount of time</li>
</ul>
<p><b>Salary Range: </b>172,000-220,000 + annual bonus + stock options + generous benefits #LI-KS1 #LI-remote</p><div><p><b>
What you'll get in return:</b></p>
<ul>
<li>Competitive Base Salary</li>
<li>Generous paid vacation</li>
<li>Generous parental leave (16 weeks at 100% pay), family care leave, and unlimited sick days</li>
<li>Equity for all employees at all levels</li>
<li>Industry-leading health benefits that are applicable per country of residence for all our full-time employees</li>
<li>Company-paid Life Insurance</li>
<li>Home Internet stipend</li>
<li>Professional allocation for your growth and development</li>
<li>One-time allowance to assist with your home office setup</li>
<li>Company-paid access to Calm, Bravely, LinkedIn Learning, MyAcademy and Overdrive</li>
</ul>
<p>Stack Overflow is proud to be an equal opportunity workplace. We value diversity, inclusion, equity and belonging and these pillars are at the heart of how we work together here at Stack. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying.</p>
<p>
For individuals based in California, and other locations where required, we will consider employment qualified applicants with arrest and conviction records.</p></div></div>

Sr. Privacy Counsel

HungerStation | هنقرستيشن

<div>
 <p>
  HungerStation is part of the Delivery Hero Group, the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience&mdash;fast, easy, and to your door. We operate in over 70+ countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  To be accountable for and oversee data protection in Hungerstation in compliance with the data protection laws and to be the central point of contact for implementation projects, regulator engagement, and strategic privacy questions.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Accountability Areas:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Personal Data Protection
  </strong>
 </p>
 <ul>
  <li>
   Collaborate with Hungerstation senior management, Legal and Cyber Security teams to implement the Hungerstation data protection and AI compliance program, aligned with the global Delivery Hero privacy strategy.
  </li>
  <li>
   Act as a point of contact for the Saudi Data &amp; AI Authority (SDAIA) and other regulators in the Kingdom of Saudi Arabia.
  </li>
  <li>
   Align policies, practices, and procedures, as well as investigations and assessments, with internal stakeholders.
  </li>
  <li>
   Promote a privacy-oriented corporate culture and ensure continuous training and awareness measures at Hungerstation.
  </li>
  <li>
   Lead Hungerstation&rsquo;s data governance program, with a strong focus on data classification and enabling the exercise of data subject rights.
  </li>
  <li>
   Monitor and update Hungerstation&rsquo;s records of personal data processing activities.
  </li>
  <li>
   Support and advise the business and operational teams on data protection-related matters.
  </li>
  <li>
   Perform privacy assessments and audits in alignment with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) requirements and global Delivery Hero standards.
  </li>
  <li>
   Internal and external reporting of compliance KPIs
  </li>
  <li>
   Provide support and advice regarding all aspects of Personal Data Protection, including contributing to developing policies and internal procedures related to Personal Data protection.
  </li>
  <li>
   Participate in awareness activities, training, and transfer of knowledge regarding Personal Data protection and compliance with provisions of the Law, Regulations, and ethics of data handling.
  </li>
  <li>
   Contribute to reviewing plans of response to Personal Data Breach incidents, and ensure that such plans are adequate and effective.
  </li>
  <li>
   Prepare periodic reports regarding activities related to the processing of Personal Data and providing recommendations to ensure compliance with provisions of the Law and its Regulations.
  </li>
  <li>
   Maintain the confidentiality of Personal Data and its level of sensitivity based on its classification and relevant regulatory requirements to determine the adequate level of protection and processing mechanism.
  </li>
  <li>
   Monitor the SDAIA&rsquo;s issued laws, regulations, and instructions and the equivalent, implement any amendments thereto, and inform the relevant departments of the same to ensure compliance therewith.
  </li>
  <li>
   Collaborate with individuals responsible for implementing activities related to AI ethics to ensure that the requirements of Personal Data Protection and Data Subjects&rsquo; privacy are met.
  </li>
 </ul>
 <p>
  <strong>
   Governance and Resilience
  </strong>
 </p>
 <ul>
  <li>
   Follow all relevant policies, procedures, and processes for the daily work to be carried out in a controlled and consistent manner.
  </li>
  <li>
   Contribute to the identification of opportunities for continuous improvement of processes and practices to enhance effectiveness.
  </li>
  <li>
   Uphold a high-performance working environment and promote HS&rsquo;s Values.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Law or equivalent qualification.
  </li>
  <li>
   3+ years working experience in data protection, preferably in a regulated entity in Saudi Arabia or the MENA region
  </li>
  <li>
   Certified expertise on data protection and AI legislation, with solid knowledge of information security practices (IAPP CIPP, S-CDPO, CISSP or similar industry-standard certifications are a plus)
  </li>
  <li>
   Proven track record of implementing compliance requirements and managing privacy projects
  </li>
  <li>
   Deep understanding of the interrelations between law and technology (previous experience in the online tech industry is welcomed)
  </li>
  <li>
   Experience in investigating potential privacy incidents, determining reporting requirements, and developing risk-based corrective action plans
  </li>
  <li>
   Strong negotiation skills in interactions with supervisory authorities
  </li>
  <li>
   Having sufficient knowledge of Personal Data breach risks.
  </li>
  <li>
   Having sufficient knowledge of regulatory measures for Personal Data protection and other relevant organizational measures for performing DPO tasks.
  </li>
  <li>
   Honesty and integrity, and not having been convicted of any offense involving dishonesty or breach of trust.
  </li>
  <li>
   Written and spoken fluency in Arabic and English are required
  </li>
 </ul>
</div>


Data Protection Officer

Cognizant Technology Solutions

<div><p><b>Leading at Cognizant</b></p><p>
This is a Leadership role at Cognizant. We believe how you lead is as important as what you deliver. Cognizant leaders at every level: <b>Drive our business strategy </b>and inspire teams around our future. <b>Live the leadership behaviors</b>, leading themselves, others and the business. <b>Uphold our Values</b>, role modeling them<b> </b>in every action and decision. <b>Nurture our people and culture</b>, creating a workplace where all can thrive.</p><p>
At Cognizant, leadership transcends titles and is embodied in actions and behaviors. We empower our leaders at every level to drive business strategy, inspire teams, uphold our values, and foster an inclusive culture.</p><p><b>
</b></p><p><b>About the role</b></p><p>
</p><p>The Senior Privacy Counsel role will support maintenance of our global privacy compliance program.</p><p>
</p><p><b>In this role, you will:</b></p><p>
</p><ul><li>Support the development implementation and monitoring of various activities within the privacy program</li><li>Oversight of the privacy governance framework including roles and responsibilities risk management and reporting</li><li>Support monitoring and effective management of new privacy data and cybersecurity developments</li><li>Maintaining a privacy training and awareness program including coordinating the production of new training and awareness materials</li><li>Management of all global regional and sectoral privacy policies and notices including annual review and coordination of updates</li><li>Maintenance of global compliance processes including records of processing privacy impact assessments transfer impact assessments etc</li><li>Support innovation and new business opportunities by analyzing privacy implications of new products and services and provide guidance on minimizing privacy compliance risk</li><li>Conduct privacy impact and risk assessments including transfer risk assessments</li><li>Consistently demonstrate the <b>Cognizant Way to Lead,</b> which means operating with <b>Personal Leadership</b> (building trust, collaboration, and inclusion), <b>Organizational Leadership</b> (driving vision and purpose, demonstrating a strategic and enterprise mindset, and creating and communicating a bold direction that inspires purpose), and <b>Business Leadership</b> (exemplifying client focus, managing ambiguity with accountability and results, and operating with financial acumen)</li></ul><p><b>
</b></p><p><b>What you need to have to be considered</b></p><p><b>
</b></p><ul><li>Deep experience in global privacy regulations including GDPR and other emerging laws</li><li>Proven ability to manage complex privacy matters across multiple jurisdictions and cultures</li><li>Fluent in English both verbally and in writing other language skills are desirable</li><li>Strong communication skills and ability to communicate effectively with people at all levels of our organization</li><li>Commercial mind-set and ability to manage changing priorities in a dynamic environment</li><li>Strong project management and problem solving skills demonstrated ability to create plan and successfully handle multiple deadlines in a fast paced environment</li><li>Experience operating virtually and within an international environment with a diversity of cultures</li><li>Experience with privacy compliance technologies</li><li>Ability to take judgement calls in complex projects requiring a pragmatic and risk-based approach</li><li>Law Degree or equivalent</li><li>Embodiment of the <b>Cognizant Way to Lead</b>: Leading Self, Leading Others, &amp; Leading the Business</li><li>The embodiment of Cognizant&rsquo;s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The right Thing, &amp; Own It</li></ul><p>
</p><p></p><p><b>Work model</b></p><p>
</p><p>We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role&rsquo;s business requirements, this is a hybrid position requiring 3 days a week in a client or Cognizant office. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.</p><p>
</p><p>The working arrangements for this role are accurate as of the date of posting. This may change based on the project you&rsquo;re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations</p><p>
</p><p>We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.</p></div>

Senior Privacy Counsel

Legal Route - Global Legal Recruitment

Overview <p>This global health care group is seeking a talented and dynamic counsel to join and lead the Data Protection legal team for this arm of their business. The role involves advising across the business on various legal risks and obligations under data protection and regulatory laws across the MENA region and beyond. The role is a great opportunity for any candidate who is keen to tackle some of today's toughest and important legal challenges in this cutting-edge area of law. You must have flexibility to adapt to changing priorities and organizational needs. In addition, you must have the ability to operate independently in a small but growing international legal team, working on issues in a vibrant, fast-paced environment. This role will provide strategic and tactical legal counseling to internal legal, product, operations and business teams on a range of privacy, data protection, and security related legal and compliance initiatives and disputes for the group of companies. This role will also be responsible for developing and maintaining relationships with data protection regulators throughout both the Middle East and globally. This is a full-time position based in Abu Dhabi.</p> Responsibilities <ul><li>Assist healthcare product lawyers in evaluating the impact of privacy laws, regulatory guidance and enforcement actions, and other related guidelines on product features</li><li>Support members of the legal, business, and policy teams on privacy and security-related legal matters, including areas related to partnerships, acquisitions, integrations, and other business development opportunities</li><li>Develop regulatory strategy in connection with new product features and initiatives, and coordinate responses to inquiries from data protection regulators in those regions</li><li>Drive high-profile and high-impact projects involving privacy analysis and compliance with stakeholders across the business, policy, legal, communications, security, and other departments</li><li>Work with the wider legal team on regulatory and data protection matters</li><li>Help draft and oversee the development and management of the business (and its affiliates') terms and data policies across the full range of the healthcare providers' different products</li><li>Help develop and conduct general and role-specific data protection trainings across the business</li></ul> Minimum Qualifications <ul><li>8+ years of legal experience, including at a law firm and/or prior in-house experience with internet or technology companies (applicable regulatory, or product counseling will be considered)</li><li>Experience with global privacy laws, regulations, and industry guidelines, especially including those relevant for the healthcare environment</li><li>Lawyer qualified to practice law in at least one jurisdiction in the Middle East. (UK / US / Australia / Canada and Ireland etc)</li><li>Ability to prioritize work and provide advice under deadlines</li><li>Business judgment and client counseling experience</li></ul> Preferred Qualifications <ul><li>In-depth knowledge of legal issues in the area of healthcare / medical devices / laboratories including an excellent understanding of regional or country specific data protection laws in the Middle East and/or globally</li><li>Industry or government experience working directly with data protection authorities in the Middle East and/or Africa</li><li>Experience in driving and managing large-scale data protection projects across multiple jurisdictions is a plus</li><li>Excellent problem-solving, written and oral communication and interpersonal skills</li></ul>

Data Protectio / Regulatory Lawyer - Health Care Group - Abu Dhabi

DUBAI PROPERTIES GROUP LLC

<p><strong>Governance & Framework Application in Foundry Platform</strong></p><p>Act as the embedded data protection lead for the Foundry platform programme, ensuring all use cases are designed and implemented in full alignment with the DH Data Protection Framework, applicable laws, and privacy by design principles.</p><ul><li>Apply the Group’s data protection framework to projects in scope, ensuring policies, procedures, and templates are clearly understood and adopted by relevant teams.</li><li>Support business owners in complying with all required processes and artefacts (e.g., DPIAs, TIAs, ROPAs, LIAs, data maps) relevant to their use cases.</li><li>Oversee the data ingestion process to verify all controls are in place before data is introduced into the platform, mitigating risks early.</li><li>Ensure that evolving regulatory requirements—including emerging AI regulations such as the EU AI Act—are reflected in project documentation, controls, and workflows.</li><li>Promote consistent and practical application of the framework by providing guidance and clarity on how requirements apply specifically to the Foundry platform.</li></ul><p><strong>Compliance & Risk Management: Privacy by Design and AI</strong></p><p>Embed privacy by design and data protection principles at the earliest stages of project design and development.</p><ul><li>Advise on Data Protection Impact Assessments (DPIAs) and AI Impact Assessments for relevant use cases.</li><li>Identify use cases that may trigger obligations under the EU AI Act or other applicable AI regulations, escalating them for further review as appropriate.</li><li>Ensure project documentation clearly captures decision rationales, risk mitigations, and alignment with privacy by design/default policies.</li><li>Drive awareness and understanding during sign-off processes to ensure stakeholders fully appreciate the data protection implications of their projects.</li></ul><p><strong>Compliance & Risk Management – Use Case Oversight</strong></p><p>Provide proactive oversight of all Foundry use cases to ensure they are compliant, risk-assessed, and well-documented prior to go-live.</p><ul><li>Work closely with business owners to identify data protection risks early, including those arising from AI capabilities and cross-border data flows.</li><li>Ensure that use cases are supported by appropriate risk assessments, privacy notices, and legal bases, with clear records of approval and stakeholder engagement.</li><li>Collaborate with Legal to address complex or emerging regulatory issues.</li><li>Maintain oversight of processing activities to ensure Records of Processing Activities (ROPAs) for Foundry are accurate, comprehensive, and regularly updated.</li><li>For use cases that present data protection risks which are non-compliant but commercially compelling, lead the preparation of detailed risk assessments outlining likelihood, impact, and residual risk. This assessment is communicated to the DPO to support executive-level decision-making regarding risk acceptance.</li></ul><p><strong>Data Subject Rights & Incident Management Support</strong></p><p>Oversee and support the handling of data subject requests and incident response within the Foundry environment.</p><ul><li>Ensure requests are identified, tracked, and fulfilled within statutory timeframes.</li><li>Collaborate with technical teams to enable accurate extraction, correction, or deletion of data from the platform.</li><li>Support investigations of data incidents and embed lessons learned into ongoing processes to prevent recurrence.</li></ul><p><strong>Assurance & Continuous Improvement</strong></p><p>Provide independent assurance to the DPO that Foundry use cases remain compliant and risks are effectively managed.</p><ul><li>Conduct targeted assurance reviews of high-risk or AI-related use cases.</li><li>Work with stakeholders to close gaps and drive continuous improvement.</li><li>Maintain an up-to-date risk register for Foundry processing activities, ensuring clear accountability and timelines for mitigation.</li></ul><p><strong>Engagement & Awareness</strong></p><p>Lead efforts to build privacy capability and embed a privacy-conscious culture within Foundry teams.</p><ul><li>Deliver targeted training and practical workshops tailored for business owners, developers, and analysts involved with the platform.</li><li>Develop role-specific guides and quick-reference materials to help teams navigate complex data protection and AI requirements.</li><li>Serve as a trusted point of contact for data protection queries, ensuring timely escalation and resolution of issues.</li></ul>

Associate Director Data Protection

Search 5430+ Privacy officer jobs near you this November. New roles added regularly across leading industries. Apply today.