Data Protection Officer

About the role

The Data Protection Officer (DPO) will lead IFZA Dubai’s privacy and data protection initiatives, ensuring compliance with applicable laws and regulations. The role provides expert advice on privacy obligations, governance, and risk management, and works closely with cross‑functional teams to embed responsible data handling across the organization.

Key responsibilities

• Oversee and enhance IFZA’s privacy and data protection framework in line with legislation and business goals.
• Review, update, and develop privacy policies, procedures, and standards.
• Maintain documentation, including the Record of Processing Activities (ROPA), to demonstrate compliance.
• Monitor privacy legislation developments and communicate changes to management.
• Provide guidance on collection, use, storage, sharing, and retention of personal information.
• Support projects involving new systems or initiatives that process personal data, identifying risks and implementing controls.
• Assist with contract reviews related to third‑party data processing.
• Conduct compliance reviews, monitor corrective actions, and prepare management reports.
• Coordinate Privacy and Data Protection Impact Assessments, recommend mitigation measures, and track implementation.
• Manage data subject rights requests, ensuring timely response and maintaining a register of outcomes.
• Coordinate responses to personal data breaches, work with Information Security, and maintain incident records.
• Assist with regulatory notifications and related documentation.

Required profile

• Strong knowledge of data protection legislation (e.g., GDPR, UAE privacy laws).
• Experience in privacy governance, risk management, and compliance monitoring.
• Ability to work collaboratively with cross‑functional teams and external partners.
• Excellent documentation and reporting skills.

Required skills