Data Protection Officer – Internal Audit

About the role

Al Khayyat Investments is seeking a Data Protection Officer to lead data protection and privacy activities across the Group. The role combines technical audit expertise with privacy governance to ensure compliance with regional and international regulations.

Key responsibilities

• Lead data protection and privacy initiatives across all group operations and support functions.
• Conduct risk assessments, DPIAs, transfer impact assessments and maintain the privacy risk register.
• Perform IT General Controls, information security, cyber‑security and data processing audits for systems, vendors and third parties.
• Review vendor arrangements, data processing agreements and privacy due‑diligence requirements.
• Support personal data breach response, including investigation, impact assessment and regulatory notification.
• Deliver data protection awareness and training programmes across the organisation.
• Collaborate with Internal Audit, IT and business teams to assess controls in ERP, CRM, HR, e‑commerce, SaaS platforms and emerging technologies.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Information Security or a related field.
• 2–3 years of experience in IT internal audit, information security audit, technology compliance or consulting.
• Hands‑on audit experience with strong report‑writing and stakeholder management.
• Preferred certifications: CIA, CISA, ISO 27701 Lead Implementer/Auditor or equivalent.

Required skills

• ISO IEC 27701
• SaaS applications
• NIST CSF
• UAE PDPL
• KSA PDPL
• Cloud platforms
• Microsoft Dynamics
• Technology compliance
• IT Audit
• Privacy governance
• COBIT
• SDAIA
• ADHICS
• Oman PDPL
• NIST Privacy Framework
• GDPR
• SAP
• Data Protection
• Information Security
• ISO 27001
• Oracle