Compliance Officer

Kempinski Hotels; Dubai; On-site; AED 180,000 - 300,000; Full time

Benefits offered by this job

Private medical insurance

Discount on stays

Annual bonus

Job summary

Kempinski Hotels in United Arab Emirates, Dubai seeks a Compliance Officer to safeguard guest and employee privacy across our luxury portfolio. You will ensure ethical and legal integrity aligns with the brand's standards.

Responsibilities include policy development, governance, monitoring GDPR compliance, DPIAs, third-party risk, and advising the business on privacy by design, while delivering training to staff worldwide.

Qualifications

• Bachelor’s or Master’s degree in Law, IT, or Business Administration.
• Certifications such as CIPP/E, CIPM, or CIPT preferred.
• 5+ years in a compliance role, preferably luxury hospitality.
• Fluent English required; second language a plus.

Responsibilities

• Serve as the primary steward of guest and employee privacy across the global hotel portfolio.
• Draft and maintain data protection policies, standards, and procedures.
• Monitor GDPR compliance via regular gap analyses and internal audits.
• Lead Data Protection Impact Assessments (DPIAs) for new technologies and programs.
• Oversee DSARs and data breach response.

Skills

Fluent English

Privacy by Design

Data privacy

Education

Bachelor’s or Master’s degree in Law, IT, or Business Administration

Job description

Compliance Officer

Department: Legal

Employment Type: Permanent - Full Time

Location: United Arab Emirates - Dubai

Reporting To: SVP Legal

Description

At Kempinski, we don't just offer stays; we curate moments. As a hospitality organization, anchored in a legacy of elegance and a pioneering spirit, we have grown into a collection of iconic hotels and resorts around the world, each a landmark in its own right. From grand palaces steeped in history to contemporary masterpieces of design, Kempinski is where impeccable service meets authentic local experiences.

We empower our people to be artisans of hospitality, fostering an environment where passion is nurtured, individuality is celebrated, and every detail is thoughtfully considered. Joining Kempinski means becoming part of a family that is dedicated to creating memories that last a lifetime for our guests, and a fulfilling and enriching career for our team.

If you are driven by excellence, inspired by the art of hospitality, and seek to contribute to a legacy of luxury, we invite you to explore the exceptional opportunities that await you at Kempinski Hotels. Come, be a part of our story.

Key Responsibilities

As the Compliance Officer, you will serve as the primary steward of guest and employee privacy across our global portfolio of luxury hotels. You will be responsible for safeguarding the brand’s reputation by ensuring that our operational excellence is matched by unwavering ethical and legal integrity.

Policy Development & Governance

• Draft and Maintain: Create, update, and implement robust data protection policies, standards, and procedures tailored to the hospitality industry.


• Global Alignment: Ensure local hotel practices align with the Corporate Privacy Framework while respecting regional legal nuances.


• Records of Processing: Maintain comprehensive Records of Processing Activities (ROPA) for all corporate and property-level functions.

Compliance Monitoring & Auditing

• Compliance Oversight: Monitor compliance with the GDPR and other relevant privacy laws through regular gap analyses and internal audits.


• DPIAs: Lead and document Data Protection Impact Assessments (DPIAs) for new technologies, guest loyalty programs, and marketing initiatives.


• Third-Party Risk: Evaluate the data protection posture of vendors and partners, ensuring Data Processing Agreements (DPAs) are in place.

Advisory & Training

• Expert Guidance: Serve as the primary point of contact for the business on privacy matters, providing pragmatic advice on \"Privacy by Design.\"


• Awareness Programs: Design and deliver engaging data protection training modules for corporate staff and hotel management teams worldwide.


• Subject Access Requests: Oversee the timely and legal handling of Data Subject Access Requests (DSARs) and \"Right to be Forgotten\" queries.

Incident Management

• Response Leadership: Lead the response team in the event of data breaches, ensuring timely notification to supervisory authorities and affected individuals.


• Remediation: Conduct post-mortem analyses of incidents to strengthen technical and organizational measures.

Skills, Knowledge and Expertise

• Education: Bachelor’s or Master’s degree in Law, IT, or Business Administration.CIPP/E, CIPM, or CIPT (IAPP) certifications are highly preferred.


• Experience: 5+ years in a compliance role, preferably within the luxury hospitality or travel sector.


• Languages: Fluent English mandatory; proficiency in a second language is a plus.


• Technical Proficiency: Strong background in Corporate/M&A, Real Estate, or Hospitality Law.

Benefits

Kempinski emphasizes talent development and offers career progression within its global network, with properties in over 30 countries. There are opportunities to work in diverse cultural environments whilst continuing your professional growth. We are proud to foster a culture where employees feel valued, heard, and are empowered to deliver exceptional guest experiences.

You will receive a competitive salary & benefits including private medical insurance, generous annual vacation allowance, annual bonus & discount on stays at our properties across the globe.

Be part of a legacy, build your future. Discover the possibilities at Kempinski.

Equal Opportunities

As an equal opportunity employer, Kempinski embraces diversity and is committed to creating a workplace where everyone feels valued and has the opportunity to succeed. Kempinski is committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or veteran status.