Data Protection Officer

MedNet UAE (MN-UAE) BU; Dubai; On-site; AED 360,000 - 590,000; Full time

Job summary

MedNet UAE (MN-UAE) BU is seeking an experienced Data Protection Officer to oversee compliance with data protection laws and Munich Re Group requirements across the MedNet Group in the MEA region. The DPO will act as the independent expert on privacy matters and provide guidance to management, employees, and business functions on lawful, fair, and secure processing of personal data.

The role reports to the Chief Compliance Officer and collaborates with Munich Re Data Protection Team, ensuring

Qualifications

• Bachelor's degree in Law, Compliance, Information Governance, Information Security, Risk Management, or a related discipline.
• Recognised certification in Data Protection or Privacy is preferred (e.g. CIPP/E, CIPM, CIPT, CDPO or equivalent).
• Minimum 4 years' experience in data protection, privacy, compliance, legal, governance or risk management functions.
• Experience advising on data protection requirements within regulated industries such as healthcare, insurance or financial services.
• Experience conducting or overseeing privacy impact assessments, privacy compliance reviews and breach management activities.

Responsibilities

• Maintain and enhance the Data Protection Framework, policies and procedures across MedNet jurisdictions.
• Deliver annual Data Protection Monitoring Plan and report key privacy risks.
• Review DPIAs for high-risk processing activities and monitor actions.
• Oversee data breach and privacy incident management, including regulatory notifications where required.
• Monitor data subject rights requests and escalate significant trends.
• Drive data protection training and awareness across the organization.
• Provide privacy oversight for third-party risk assessments, outsourcing, and cross-border transfers.
• Support regulatory inspections, audits, and reporting with regional teams.

Education

Bachelor's degree in Law, Compliance, Information Governance, Information Security, Risk Management, or related discipline

Certified Data Protection or Privacy (e.g., CIPP/E, CIPM, CIPT, CDPO)

Job description

Job Description - Data Protection Officer (2600000X)

Job Description

Data Protection Officer - ( 2600000X )

Description

As a member of Munich Re, the MedNet Group is a leading Third-Party Administrator (TPA) serving the healthcare and insurance sectors across the MEA region. We are looking for an experienced Data Protection Officer (DPO) who will be responsible for overseeing and promoting compliance with applicable data protection and privacy laws, regulations and Munich Re Group requirements across the MedNet Group. The DPO acts as the independent subject matter expert for data protection matters and provides advice, guidance and oversight to management, employees and business functions on the lawful, fair and secure processing of personal data.

The role reports directly to the Chief Compliance Officer and maintains a functional reporting line to the Munich Re Data Protection Team and will from time-to-time report to the Munich Re Regional Head of Legal and Compliance for DP related issues. The DPO supports the development, implementation and continuous improvement of the MedNet Group data protection framework and serves as the central point of contact for data protection regulators, data subjects and Munich Re Group stakeholders on privacy-related matters.

Your Role:

• Maintain and enhance the Data Protection Framework, policies and procedures, ensuring compliance with applicable data protection laws and regulatory requirements across all MedNet jurisdictions, with timely reporting to management and relevant governance committees.
• Deliver the annual Data Protection Monitoring Plan, conduct monitoring reviews, identify and report key privacy risks, issue recommendations, and track agreed remediation actions through to closure.
• Review and advise on Data Protection Impact Assessments (DPIAs) for high-risk processing activities, ensuring assessments are completed prior to implementation and resulting management actions are effectively monitored.
• Oversee personal data breach and privacy incident management, including timely assessment and documentation, regulatory notifications where required, root cause analysis for significant incidents, and monitoring of corrective actions.
• Monitor data subject rights requests across relevant entities, ensuring statutory response requirements are met while identifying and escalating significant trends, recurring issues, complaints or regulatory enquiries.
• Drive data protection training and awareness, including annual mandatory training, targeted awareness sessions for high-risk business functions, and initiatives designed to strengthen employees’ privacy awareness.
• Provide privacy oversight for third-party risk assessments, outsourcing, data-sharing arrangements and cross-border transfers, ensuring compliance with applicable local laws and Munich Re Group transfer requirements and escalating non-compliant arrangements.
• Support regulatory inspections, audits reporting and requests, engage effectively with Munich Re Data Protection and Regional Legal & Compliance teams, monitor legislative developments maintain privacy metrics and management reporting, and drive continuous improvement and maturity of the privacy programme.

Qualifications

Your profile:

Minimum Qualifications:

• Bachelor's degree in either Law, Compliance, Information Governance, Information Security, Risk Management, or a related discipline.
• Recognised certification in Data Protection or Privacy is preferred (e.g. CIPP/E, CIPM, CIPT, CDPO or equivalent).
• Additional compliance, governance or risk qualifications would be advantageous.
• Minimum 4 years' experience in data protection, privacy, compliance, legal, governance or risk management functions.
• Experience advising on data protection requirements within regulated industries such as healthcare, insurance or financial services.
• Experience conducting or overseeing privacy impact assessments, privacy compliance reviews and breach management activities.
• Experience engaging with regulators, auditors and senior stakeholders.
• Experience operating within a multinational or matrix reporting environment would be advantageous.

*Munich Re not only stands for fairness with regard to its clients; it is also an equal opportunities employer.

Primary Location

AE-AE-Dubai

Work Locations

MN UAE 500259 Dubai Internet City Dubai

Job

Professional

Organization

MedNet UAE (MN-UAE) BU

Schedule

Regular

Shift

Standard

Job Type

Full-time

Day Job

Job Posting

Refer a friend for this job

Tell us about a friend who might be interested in this job. All privacy rights will be protected. Refer a friend