Data Privacy and Protection Specialist

DiceTek UAE; Abu Dhabi; On-site; AED 320,000 - 550,000; Full time

Job summary

Dicetek LLC in Abu Dhabi, United Arab Emirates, is seeking an experienced Data Privacy and Protection Specialist. The role focuses on privacy-by-design practices, conducting data-protection assessments and monitoring privacy compliance across enterprise technology and data initiatives.

The successful candidate will evaluate privacy risks, maintain records of processing and advise project teams on data minimisation, retention and data-subject rights.

Qualifications

• Minimum 7 years of relevant professional experience.
• Practical experience in data privacy, data protection or related governance activities.
• Experience conducting privacy impact or data-protection assessments.
• Knowledge of records of processing and data inventory management.
• Understanding of personal data lifecycle and retention considerations.
• Experience assessing privacy risks associated with technology and data initiatives.
• Experience in regulated financial services is preferred.

Responsibilities

• Conduct privacy impact assessments for new and modified data-processing activities.
• Evaluate privacy risks associated with technology and data initiatives.
• Advise on data minimisation and retention requirements.
• Review third-party data-processing arrangements for privacy considerations.
• Maintain records of processing and privacy governance documentation.
• Prepare privacy compliance reports for stakeholders.
• Coordinate remediation and governance reporting.

Skills

Privacy-by-design

Data-protection

Privacy Impact

Data minimisation

Data retention

Data subjects rights

Cross-border data

Governance records

Tools

Microsoft 365

Power BI

GRC platforms

Privacy management platforms

Job description

Job Snapshot

Data Privacy and Protection Specialist Job Snapshot - Role: Data Privacy and Protection Specialist - Location: Abu Dhabi, United Arab Emirates - Industry: Banking - Function: Risk Management-Compliance - Experience: Minimum 7 years - Job Type: Full Time - Work Arrangement: On-site

Position Overview

Dicetek LLC is seeking an experienced Data Privacy and Protection Specialist for an immediate-start opportunity in Abu Dhabi, United Arab Emirates. The role focuses on supporting privacy-by-design practices, conducting data-protection assessments and monitoring privacy compliance across enterprise technology and data initiatives. The successful candidate will evaluate privacy risks associated with new and modified data-processing activities, maintain records of processing and advise project teams on data minimisation, retention, transparency and data-subject rights. The position also involves reviewing third-party data-processing arrangements, assessing cross-border data considerations and maintaining privacy governance records, remediation logs and compliance reporting. Experience working with multidisciplinary technology, risk and business stakeholders is required. Previous experience in regulated financial services is preferred.

Job Details

Country: United Arab Emirates - City: Abu Dhabi - Industry: Banking - Function: Risk Management-Compliance - Salary: Not disclosed - Gender: No Preference - Candidate Nationality: Not specified - Job Type: Full Time - Work Arrangement: On-site - Required Start Date: Immediate

Key Responsibilities

Privacy Impact and Data-Protection Assessments

• Conduct privacy impact assessments for new and modified data-processing activities.
• Evaluate data-protection risks associated with technology and data initiatives.
• Assess whether proposed processing activities incorporate appropriate privacy controls.
• Identify privacy risks and recommend suitable control improvements.
• Document assessment findings, recommendations and outstanding actions.
• Coordinate with relevant stakeholders to address identified privacy concerns.

Privacy-by-Design Advisory

• Support the integration of privacy-by-design principles into technology and data initiatives.
• Advise project teams on data minimisation requirements.
• Provide guidance on appropriate data retention considerations.
• Review transparency requirements associated with personal data processing.
• Advise stakeholders on data-subject rights considerations.
• Support the identification and implementation of appropriate privacy controls.
• Promote consistent consideration of data protection throughout relevant project activities.

Records of Processing and Data Governance

• Maintain accurate records of personal data-processing activities.
• Support the maintenance of enterprise data inventories.
• Document relevant data-processing purposes and associated privacy considerations.
• Maintain privacy control evidence and supporting governance documentation.
• Review processing records for completeness and consistency.
• Coordinate updates to records when processing activities change.
• Support traceability between privacy assessments, identified risks and control recommendations.

Third-Party and Cross-Border Privacy Risk

• Review third-party data-processing arrangements for relevant privacy considerations.
• Identify privacy risks associated with external processing activities.
• Assess cross-border data-processing and transfer considerations.
• Coordinate with relevant stakeholders on third-party privacy requirements.
• Document findings and recommended actions arising from privacy reviews.
• Track outstanding privacy concerns associated with third-party arrangements.

Privacy Risk and Incident Monitoring

• Maintain records of identified privacy risks and remediation activities.
• Track privacy-related incidents and associated follow-up actions.
• Monitor outstanding privacy control recommendations.
• Coordinate with responsible stakeholders on remediation progress.
• Maintain an accurate privacy remediation log.
• Escalate unresolved privacy risks through appropriate governance channels.
• Support ongoing monitoring of privacy compliance activities.

Privacy Compliance and Governance Reporting

• Prepare privacy compliance reports for relevant stakeholders.
• Maintain supporting evidence for privacy governance reviews.
• Consolidate assessment findings, control recommendations and remediation status.
• Develop clear reporting on outstanding privacy risks and actions.
• Support the preparation of privacy evidence packs.
• Ensure reporting is consistent with available assessment and control records.
• Communicate relevant privacy findings to technology, risk and business stakeholders.

Required Experience and Knowledge

• Minimum 7 years of relevant professional experience.
• Practical experience in data privacy, data protection or related governance activities.
• Experience conducting privacy impact or data-protection assessments.
• Knowledge of records of processing and data inventory management.
• Understanding of personal data lifecycle and retention considerations.
• Experience assessing privacy risks associated with technology and data initiatives.
• Knowledge of third-party data-processing and cross-border privacy considerations.
• Experience maintaining privacy risk, remediation and compliance records.
• Ability to work with multidisciplinary technology, risk and business stakeholders.
• Experience in regulated financial services is preferred.

Required Skills

Data Privacy and Protection

• Privacy-by-design principles.
• Data-protection assessments.
• Privacy impact assessments.
• Personal data-processing controls.
• Data minimisation.
• Data retention.
• Transparency requirements.
• Data-subject rights.

Privacy Governance

• Records of processing.
• Data inventory management.
• Privacy control evidence.
• Privacy risk assessment.
• Privacy remediation tracking.
• Privacy incident monitoring.
• Compliance reporting.

Third-Party Privacy

• Third-party data-processing reviews.
• Third-party privacy risk assessment.
• Cross-border data considerations.
• Documentation of privacy risks and recommendations.

Stakeholder Management and Reporting

• Cross-functional stakeholder coordination.
• Privacy advisory support.
• Assessment documentation.
• Risk and remediation reporting.
• Governance evidence preparation.
• Clear written communication.

Preferred Tools and Platforms

• Privacy management platforms.
• Governance, Risk and Compliance (GRC) platforms.
• Microsoft 365.
• Microsoft Power BI.

Preferred Professional Certifications

• Certified Information Privacy Professional/Europe (CIPP/E).
• Certified Information Privacy Manager (CIPM).
• Certified Information Privacy Technologist (CIPT).
• Equivalent recognised data privacy or protection certification.
• These certifications are desirable rather than mandatory.

Key Deliverables

Privacy Assessments

• Completed privacy impact and data-protection assessments.
• Documented privacy risks and findings.
• Practical privacy control recommendations.
• Supporting assessment documentation.

Processing Records and Remediation

• Current records of processing.
• Updated data inventories and privacy control evidence.
• Maintained privacy risk and remediation log.
• Tracked outstanding privacy actions.

Compliance and Governance Reporting

• Privacy compliance reports.
• Documented remediation status.
• Privacy governance evidence packs.
• Clear reporting of outstanding risks and control recommendations.

Professional Competencies

• Strong analytical and privacy risk assessment skills.
• Attention to documentation accuracy and completeness.
• Ability to evaluate data-processing activities and associated privacy considerations.
• Effective communication with technology, risk and business stakeholders.
• Sound judgment when identifying privacy risks and recommending controls.
• Strong organisational and remediation-tracking capabilities.
• Clear written reporting and governance documentation skills.
• Ability to manage multiple privacy assessments and compliance activities.

Role Expectations

The Data Privacy and Protection Specialist will support the consistent application of privacy-by-design and data-protection practices across enterprise technology and data initiatives. The successful candidate will provide practical privacy guidance, conduct structured assessments, maintain reliable processing records and support ongoing privacy compliance monitoring. The role requires a professional who can identify privacy risks, recommend appropriate controls and coordinate remediation activities while maintaining accurate governance evidence. The primary objective is to strengthen privacy risk visibility, support responsible personal data processing and maintain effective data-protection governance. Candidates must have at least 7 years of relevant experience and be available for an immediate start.