Data Protection Officer

EGA is seeking a Data Protection Officer to lead the Group’s global data protection and privacy programme. The role serves as EGA’s designated DPO in the UAE and other applicable jurisdictions and provides expert privacy advice to the Board, executive leadership and business units across the Group. The position combines strategic privacy governance, regulatory compliance, risk management, incident response and stakeholder engagement, with responsibility for building a scalable privacy framework suitable for a geographically diverse organisation.

Key Responsibilities

• Develop and drive EGA’s global data-protection strategy in alignment with corporate objectives and organisational growth.
• Promote privacy awareness and accountability across EGA entities.
• Advise leadership and business functions on privacy risks, regulatory developments and compliance requirements.
• Manage the Group privacy risk profile and align privacy risk management with strategic objectives.
• Lead responses to data breaches and privacy incidents, coordinating with business functions, regulators, executive leadership and the Board.
• Act as a primary contact for data-protection authorities, regulators and data subjects across relevant jurisdictions.
• Support privacy requirements connected with M&A transactions, including privacy due diligence and post-acquisition compliance integration.
• Build cross-functional relationships and influence stakeholders to advance privacy initiatives.
• Support compliance with global data-protection requirements and address data-protection implications arising from AI systems and emerging AI regulatory frameworks.

Requirements

• Degree in law, information technology, business or a related discipline.
• Professional data-protection certification such as IAPP CIPP/E, CIPP/US, CIPM or CIPT is strongly preferred.
• 7 to 10 years of experience in data protection or privacy roles, including senior-level privacy-programme leadership in a multinational organisation operating across multiple jurisdictions.
• Proven data-breach response and regulatory-engagement experience.
• Experience supporting M&A privacy due diligence and post-acquisition compliance integration.
• Expert knowledge of global data-protection legislation, including UAE, EU and US requirements.
• Extensive knowledge of AI governance principles and privacy implications of AI systems, including the EU AI Act and emerging frameworks.

Employment Details

• Company: Emirates Global Aluminium (EGA)
• Location: Abu Dhabi, United Arab Emirates
• Employment Type: Full Time
• Industry: Mining