Data Protection Officer

Edenred; Dubai; On-site; AED 420,000 - 720,000; Full time

Job summary

Edenred UAE is seeking a Data Protection Officer to drive the local data privacy program and ensure compliance with UAE regulations and Group standards. You will partner with legal, IT and business teams to implement privacy by design and manage data protection projects.

Success requires strong knowledge of GDPR-like frameworks, experience handling personal data in financial/payments contexts, and excellent communication across an international environment. Fluency in English is essential.

Qualifications

• Qualified in new technology law and/or certification in personal data protection.
• At least full time 3 years’ experience in a position highly exposed to personal data protection issues in a law firm, an international company, or a Data Protection Authority.
• In-depth knowledge of regulations relating to personal data (in particular the GDPR) and their application.
• Experience in payments, new technologies, or in a regulatory environment would be a plus.

Responsibilities

• Roll out the Group data protection compliance program to ensure compliance locally and reporting on the progression’s status.
• Deploy a local roadmap of compliance in order to meet both Group objectives and cover potential local identified gaps.
• Support deployment of Group data protection tools (notably One Trust) at local level.
• Support local teams with the Group projects deployed locally, notably by ensuring proper adaptation regarding local legislation.
• Ensure a local adaptation of Group documentation (policies and procedure, etc.).
• Act as a key Business Units’ point of contact on data protection topics for the Group.
• Supporting local teams with data protection compliance of any local project (privacy by design) and ensure compliance over time.
• Prepare and update local data protection documentation (Information notices, Data Processing Agreements, consent forms, policies and procedures, etc.) and perform privacy impact assessments, legitimate interest assessments and risk analysis, where necessary.
• Fill in and maintain up to date the inventory of personal data processing activities (One Trust);
• Manage data subjects’ requests in collaboration with local teams;
• Participate in negotiation of Data Processing Agreements with corporate clients and providers;
• Conduct awareness sessions on a regular basis and yearly training sessions;
• Coordinate, in collaboration with IT, the management of potential incidents involving personal data within the framework of policies and procedures defined at Group level;
• Act as a point of contact for local regulators and coordinate with the Group;
• Monitor the evolution of regulations and standards in terms of data protection (specific to the area of action).

Skills

Communication skills

Coordination

Autonomy

Project management

Fluent English

Education

New technology law qualification or PD certification

Tools

One Trust

Job description

ABOUT EDENRED

Edenred is the leading digital platform for corporate services in the areas of benefits, professional mobility, and B2B payments.

Operating in 44 countries, it connects more than 60 million users to over 2 million partner merchants through more than 1 million client companies.

Edenred offers solutions dedicated to employee engagement (meal vouchers, commuting, gift vouchers, wellness, rewards, and preferential offers to boost purchasing power), mobility (multi-energy solutions, including EV charging, fleet management services, maintenance, toll, and parking), and corporate payments (virtual cards). In addition to its own solutions, Edenred also distributes offers from more than 120 partners on its platform.

True to the Group's purpose, \"Enrich connections. For good.\", these solutions enhance users' well-being and purchasing power and simplify the lives of professional drivers while promoting access to healthier food, more environmentally friendly products, and more sustainable mobility. They improve the attractiveness and efficiency of businesses and vitalize the employment market and the local economy.

Edenred’s 12,000 employees are committed to making the world of work a connected ecosystem that is safer, more efficient and more responsible every day.

In 2024, thanks to its global technology assets, the Group generated a business volume of nearly €45 billion, mainly through mobile applications, online platforms and cards.

Edenred is listed on the Euronext Paris stock exchange and included in the following indices: CAC Next 20, CAC Large 60, Euronext 100, Euronext Tech Leaders, FTSE4Good, DJSI Europe Index, DJSI World Index, and MSCI Europe.

THE UAE CONTEXT

Edenred UAE is a fast growing payroll service provider serving more than 15,000 business and more than 2.2 million unbanked employees. We service over 10 banks and 35 financial institutions. We offer a unique value proposition for companies to manage their payroll and for employees to receive their salaries and use it in the simplest way offering multiple value added services via our mobile app (money transfer, mobile recharge and card services)

THE ROLE

We are looking for a Data Protection Officer to support the deployment and monitoring of Edenred Group’s data protection compliance framework within the UAE. This role offers the opportunity to work closely with legal, business, operational, and IT teams while contributing to strategic privacy initiatives in a highly regulated and international environment. You will act as a key point of contact for data protection matters, helping ensure compliance with local regulations and Group standards while supporting business growth and innovation.

RESPONSIBILITIES

• Roll-out the Group data protection compliance program to ensure compliance locally and reporting on the progression’s status;
• Deploy a local roadmap of compliance in order to meet both Group objectives and cover potential local identified gaps;
• Support deployment of Group data protection tools (notably One Trust) at local level;
• Support local teams with the Group projects deployed locally, notably by ensuring proper adaptation regarding local legislation;
• Ensure a local adaptation of Group documentation (policies and procedure, etc.);
• Act as a key Business Units’ point of contact on data protection topics for the Group;
• Supporting local teams with data protection compliance of any local project (privacy by design) and ensure compliance over time;
• Prepare and update local data protection documentation (Information notices, Data Processing Agreements, consent forms, policies and procedures, etc.) and perform privacy impact assessments, legitimate interest assessments and risk analysis, where necessary;
• Fill in and maintain up to date the inventory of personal data processing activities (One Trust);
• Manage data subjects’ requests in collaboration with local teams;
• Participate in negotiation of Data Processing Agreements with corporate clients and providers;
• Conduct awareness sessions on a regular basis and yearly training sessions;
• Coordinate, in collaboration with IT, the management of potential incidents involving personal data within the framework of policies and procedures defined at Group level;
• Act as a point of contact for local regulators and coordinate with the Group;
• Monitor the evolution of regulations and standards in terms of data protection (specific to the area of action).

YOUR PROFILE

• Qualified in new technology law and/or certification in personal data protection;
• At least full time 3 years’ experience in a position highly exposed to personal data protection issues in a law firm, an international company, or a Data Protection Authority;
• In-depth knowledge of regulations relating to personal data (in particular the GDPR) and their application;
• Interest in technological topics. Knowledge of the context and issues related to Edenred’s business sector. Experience in the field of payments, new technologies, or in a regulatory environment would be a plus;
• Flexibility. Ability to manage projects in collaboration with others, and to work in a very international environment with teams with very varied expertise and profiles;
• Strong skills required in written and oral communication, and coordination;
• Autonomy and responsiveness. Ability to identify and measure risks, prioritise actions, and make recommendations adapted to the context;
• Results oriented. Ability to facilitate corporate decision-making;
• Fluent English (both written and oral) allowing you to interact daily with teams located abroad. Other languages (particularly those related to the scope of action) highly appreciated.

REPORTING STRUCTURE

The selected candidate will report directly to the Legal and Regulatory Associate and will operate under the functional responsibility of the Group Data Protection Officer based in Paris.