Manager - Data Privacy

Job Description

Responsibilities

• Responsibilities:
• - Manage the implementation and continuous enhancement of the Data Protection Framework
• - Maintain and review core policies and standards aligned with regulatory expectations. Ensure consistent adoption across business units
• - Provide oversight on policy effectiveness and control maturity
• - Ensure consistent adoption across business units by embedding governance requirements into operational practices, monitoring policy effectiveness and control maturity, and driving remediation actions where gaps are identified
• - Provide structured governance oversight and reporting to support regulatory compliance, management assurance and sustainable privacy practices across the organisation
• - Responsible for executing and managing ADCB’s end‑to‑end privacy framework as a Second Line of Defence (2LoD) function, acting as a trusted business partner to enable the effective identification, assessment, and mitigation of privacy risks across the organisation
• - Manage the delivery, consistency, and quality of all privacy and data risk assessments (including DPIAs, PIAs, and jurisdictional assessments), guides standardised risk scoring and mitigation planning, governs the privacy risk register, and defines and embeds baseline privacy controls
• - Manage core privacy operations such as Data Subject Rights management, RoPA governance, and privacy reviews of contracts and data sharing arrangements, ensuring regulatory alignment and regulator‑ready assurance
• - Manage structured oversight of privacy risks in change and transformation initiatives, ensuring early engagement, embedding privacy‑by‑design across product and system lifecycles, and supporting the business through clear guidance, collaboration, and oversight
• - Interpret and operationalise UAE PDPL, CBUAE Consumer Protection Regulations and supervisory standards by translating regulatory requirements into practical controls and operational processes
• - Manage regulatory inspections, supervisory reviews and audits by preparing accurate, timely and regulator‑defensible documentation and evidence
• - Ensure privacy outputs remain audit‑ready and provide structured regulatory updates, impact assessments and thematic insights to senior management to support effective governance and regulatory confidence
• - Manage the full lifecycle of data privacy incidents and breaches by overseeing identification, investigation, severity assessment, containment, remediation and closure activities in collaboration with key stakeholders.
• - Apply a consistent risk‑based methodology to assess customer, financial, regulatory and reputational impact, ensure timely escalation and governance approvals, and oversee regulatory and customer notifications where required.
• - Drive root‑cause analysis and lessons‑learned initiatives to strengthen controls and reduce the likelihood of recurrence.

Skills Required