Data Protection Officer (Global Privacy Lead)

About the role

Emirates Global Aluminium is seeking a senior Data Protection Officer to lead its global privacy and data protection programme. The DPO will act as the designated privacy authority for the Group across the UAE and all other jurisdictions where EGA operates, ensuring compliance with evolving data protection laws.

Key responsibilities

• Develop and drive a scalable global data protection strategy aligned with corporate objectives.
• Lead privacy risk management, breach response, and liaison with regulators and data subjects.
• Establish and maintain privacy policies, standards, data mapping, and third‑party assessments across all subsidiaries.
• Conduct privacy impact assessments, manage data subject rights requests, and advise on contractual privacy clauses.
• Oversee privacy due diligence for new ventures, acquisitions, and joint‑venture integrations.
• Provide advisory oversight on responsible AI, monitoring global AI regulations and embedding ethical principles.

Required profile

• Degree in law, IT, business or related field; professional data protection certification (e.g., CIPP/E, CIPP/US, CIPM, CIPT) strongly preferred.
• 7–10 years of experience in data protection or privacy roles, including senior leadership of a multinational privacy programme.
• Proven track record managing data breach responses and regulatory engagements.
• Experience supporting M&A transactions with privacy due diligence and post‑acquisition integration.
• Deep knowledge of UAE, EU and US data protection legislation and emerging AI governance frameworks.