Data Protection Officer & Internal Audit Lead

Al Khayyat Investments (AKI); Dubai; On-site; AED 250,000 - 400,000; Full time

Job summary

Al Khayyat Investments is seeking a Data Protection Officer to lead data protection and privacy activities across the Group. The role requires a technically strong professional with experience in IT audit, information security, technology compliance, data protection, and privacy governance.

As Data Protection Officer, you will conduct DPIAs, risk assessments, and oversee data classification while ensuring compliance with UAE PDPL, GDPR, and related standards.

Qualifications

• Bachelor’s degree in IT, CS, or info security required.
• 2–3 years in IT internal audit, information security audit, or technology compliance.
• Knowledge of ISO 27001, NIST CSF, GDPR, UAE PDPL and related frameworks.
• Experience with ERP or cloud/SaaS platforms (SAP, Oracle, Microsoft Dynamics).
• Strong report writing and stakeholder management skills.

Responsibilities

• Lead data protection and privacy activities across group operations.
• Ensure alignment with data protection policies and regulations.
• Support data governance, classification, labelling, and processing records.
• Conduct risk assessments, DPIAs, transfer impact assessments, and privacy risk register.
• Perform IT general controls and information security audits across vendors.
• Review DPAs, data processing agreements, and privacy due diligence.
• Support data breach response, including investigation and regulatory notification.
• Deliver data protection awareness and training across the organisation.
• Collaborate with Internal Audit, IT, and business teams on controls.

Skills

IT audit experience

Information security

Privacy governance

Stakeholder management

Education

Bachelor's degree in Information Technology / Computer Science

Tools

SAP

Oracle

Microsoft Dynamics

Cloud platforms

SaaS applications

Job description

Al Khayyat Investments is seeking a Data Protection Officer to lead data protection and privacy activities across the Group. The role requires a technically strong professional with experience in IT audit, information security, technology compliance, data protection, and privacy governance.

As Data Protection Officer, you will conduct DPIAs, risk assessments, and oversee data classification while ensuring compliance with UAE PDPL, GDPR, and related standards.