Alshaya Jobs – Head of GDPR Compliance

Job Description:

• A dynamic, self-motivated and forward-thinking individual who can work independently and lead a team of professionals that are focused on controlling, managing and enforcing the relevant security protocols related to GDPR compliance and data protection throughout all relevant impacted areas of the Alshaya business.

Job Responsibilities:

• Represent the company in dealing with Data Protection Commission Officers, including complaints and data breach notifications;
• Conduct risk assessments for high-risk processing in connection with GDPR requirements, including data security, security breach notifications, privacy by design, legitimate interest, purpose limitation and fair processing;
• Install the relevant monitoring of compliance within the regulations, including GDPR, and Company policies and guidelines with respect to data protection
• Manage escalated queries from all parts of the business, bringing them to resolution by developing effective solutions
• Conduct GDPR Readiness assessments, assess information security measures with the support of the Operational Risk
• Management department and advice on remediation measures;
• Develop communications strategy, in line with corporate strategy to engage with the key stakeholders
• Construct and implement the Data Protection Policy & Frameworks required, including all relevant policies and standards throughout the business
• Track and maintain a log of all incidents, complaints, data breaches and notifications, linking with the IS team to remedy with tangible solutions;
• Review commercial agreements and contracts, including Data Processing agreements with data processors
• Provide recommendations on technical controls that support protection of sensitive/PII throughout data lifecycle.
• Continually develop, adapt and cascade a programme of staff awareness training to achieve compliance and foster a culture of data privacy within the organisation

Job Requirements:

• Proven expert knowledge of data protection technologies and enterprise scale deployment.
• Implementation projects
• Strong understanding of ICT Security.
• Expert knowledge of Data Protection Laws and regulations, including updates and amendments.
• Previous roll out and project management knowledge required.
• Relevant certifications an asset, such as Certified Information Privacy Professional (CIPP/US or CIPP/E, or equivalent),
• Information Security Manager (CISM).
• Relevant certifications an asset, such as Certified Information Privacy Professional (CIPP/US or CIPP/E, or equivalent),
• Information Security Manager (CISM).

Qualification & Experience:

• Minimum 3-5 years experience in the domain of data privacy / protection and actively contributed to GDPR
• Certified Information Privacy Manager (CIPM), Certified Information Systems Security Professional (CISSP) or Certified
• Certified Information Privacy Manager (CIPM), Certified Information Systems Security Professional (CISSP) OR Certified

Job Details:

Company: Alshaya

Vacancy Type: Full-time

Job Functions: Other

Job Location: Dubai, United Arab Emirates

Application Deadline: N/A

Apply Here