Data Protection Officer & Data Governance Manager

About the Role

A fast-growing digital financial services company in the UAE is building a technology-driven banking platform from the ground up. The organization seeks a senior-level Data Protection Officer & Data Governance Manager to lead and define its data governance, privacy, and protection frameworks during a key growth phase. Reporting directly to the Chief Risk Officer, this position holds functional independence as the official Data Protection Officer with significant influence over the company’s data strategy.

Core Responsibilities

• Develop and enforce a robust data governance and privacy framework aligned with Central Bank of UAE (CBUAE) guidelines and UAE Federal Data Protection Law.
• Create, update, and maintain data policies, standards, and procedures.
• Manage the enterprise-wide data catalog, ownership, and classification systems.
• Identify and oversee management of Critical Data Elements across the business.
• Design and implement data security and privacy architectures including encryption, access controls, and personally identifiable information (PII) protection.
• Integrate governance and privacy controls into data platforms, pipelines, and DevOps workflows.
• Conduct Data Protection Impact Assessments (DPIAs) and maintain Records of Processing Activities (ROPA).
• Ensure compliance with data residency and localization regulations.
• Serve as the company’s registered Data Protection Officer and primary liaison with regulators.
• Manage processes related to Data Subject Access Requests and data breach responses.
• Drive company-wide initiatives to enhance data quality and stewardship.
• Establish governance protocols for ethical use of AI and analytic tools.
• Oversee data risk associated with third parties and cloud services.
• Advise executive leadership and the Board independently on data protection, governance, and changing regulatory landscapes.

Candidate Profile

The ideal candidate combines strong technical expertise with deep regulatory knowledge.

• Experience leading data governance, privacy, or data protection functions within regulated environments.
• Background in financial services, banking, or FinTech sectors.
• Comprehensive understanding of UAE data protection laws and regulations from CBUAE.
• Hands-on technical or engineering experience facilitating translation of governance into practical technology controls.
• Familiarity with data lifecycle management, privacy frameworks, and enterprise security architecture.
• Proven ability to develop and embed policies and controls into technical environments.
• Strong interpersonal skills to effectively engage and influence senior stakeholders.
• Experience thriving in start-up, scale-up, or greenfield business settings is highly beneficial.

Desirable Skills and Knowledge

• Experience with digital or challenger banking platforms.
• Exposure to AI governance and digital transformation projects.
• Knowledge of industry standards such as ISO 27001, NIST, and BCBS 239.
• Familiarity with GDPR and other international data protection frameworks.
• Certifications such as CIPP/E, CIPM, CISSP, CISM, or CDMP.
• Understanding of central bank and regulatory approval processes.
• Arabic language capabilities considered a plus.

Why Join This Organization?

This role goes beyond traditional policy management; it offers a unique chance to shape and develop the data governance function right from inception. You will have a direct impact on embedding privacy and data protection controls within cutting-edge technology and product development from day one in a vibrant financial services environment focused on high growth.

If you are an experienced data protection, governance, or privacy professional seeking a senior position within an innovative UAE fintech or banking firm, this is an exceptional opportunity to advance your career.