Data Privacy Senior Manager — DPO & Compliance Strategy

Majid Al Futtaim; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

Majid Al Futtaim invites applications for a Data Privacy Senior Manager at MAF Entertainment, Head Office. You will own data privacy governance across multiple jurisdictions, ensuring compliance with local laws and internal policies.

You will lead DPIAs, RoPA, training, audits, and serve as the primary contact for regulators, while shaping a privacy-first culture across the organization.

Qualifications

• Minimum 5 years of experience in data privacy.
• Strong knowledge of data privacy laws and regulations across multiple jurisdictions.
• Experience with data protection tools (e.g., Securiti.AI).
• Self-motivated, professional, proactive, and enthusiastic with a strong work ethic.

Responsibilities

• Serve as the Data Privacy Officer and advisor on lawful, ethical data processing across all operating countries.
• Implement and maintain data privacy policies, procedures, and frameworks aligned with local regulations.
• Lead privacy training, workshops, and awareness initiatives to promote a privacy-first culture.
• Collaborate with Legal, Compliance, InfoSec, and business units to align on data protection strategies.
• Monitor regulatory changes and assess risks, updating policies proactively.
• Act as the main contact for regulators, managing audits and data protection inquiries.
• Maintain Records of Processing Activities (RoPA) and conduct DPIAs and privacy risk assessments.
• Oversee incident management and data subject requests, ensuring compliance and proper resolution.

Skills

Organizational skills

Attention to detail

Written English

Self-motivated

Proactive

Education

CIPM or CIPP/E

Tools

Securiti.AI

Job description

Majid Al Futtaim invites applications for a Data Privacy Senior Manager at MAF Entertainment, Head Office. You will own data privacy governance across multiple jurisdictions, ensuring compliance with local laws and internal policies.

You will lead DPIAs, RoPA, training, audits, and serve as the primary contact for regulators, while shaping a privacy-first culture across the organization.