Director - Data Privacy Office

AD Ports Group; Abu Dhabi; On-site; AED 700,000 - 1,200,000; Full time

Job summary

AD Ports Group is seeking a senior privacy leader to design, rollout, and govern a global data privacy program ensuring GDPR compliance across jurisdictions. You will embed privacy by design into operations, technology, and vendor processes while strengthening regulatory readiness and risk management.

The role acts as a trusted advisor to executive management, collaborating with Legal, Compliance, Cybersecurity, IT, and HR to operationalize privacy obligations globally.

Qualifications

• Minimum 10 years’ experience in data privacy, data protection, compliance, legal, or related governance roles, including senior leadership responsibility in complex multinational organizations.
• Demonstrated experience designing and rolling out a data privacy program for a global company across multiple jurisdictions.
• Strong hands-on GDPR experience, including privacy governance, DPIAs, records of processing, data subject rights, breach response, and cross-border transfer compliance.
• Excellent English; Spanish and Arabic languages are an advantage in a global operating environment.
• Proven ability to partner with executive leadership and cross-functional stakeholders to embed privacy by design into operations.

Responsibilities

• Lead the enterprise-wide data privacy program for a global organization, establishing the strategy, governance model, policies, standards, and controls.
• Serve as the senior subject-matter expert on GDPR and other applicable privacy laws and regulations, translating legal requirements into practical business and operational controls.
• Act as the primary privacy advisor to the Chief Compliance Officer and senior leadership on strategic initiatives, emerging privacy risks, enforcement trends, and regulatory obligations.
• Monitor compliance with privacy laws, internal policies, and program standards through audits, reviews, metrics, and ongoing assurance activities.
• Lead or coordinate the privacy response to personal data incidents and breaches, including assessment, escalation, regulatory notification support, remediation, and lessons learned.

Skills

GDPR

Privacy governance

Leadership

Stakeholder management

Policy drafting

Education

Bachelor's degree in Law / Information Governance / Cybersecurity / Business / Compliance

CIPP/E, CIPP/M, CIPM, CIPT or equivalent certifications

Job description

Overview

Responsible for leading the design, rollout, governance, and continuous enhancement of the organization’s global data privacy program, ensuring that personal data is processed in compliance with GDPR and other applicable privacy laws across all jurisdictions in which the company operates.

The role serves as the senior privacy leader and trusted advisor to executive management, embedding privacy by design into business operations, technology, third‑party relationships, and strategic initiatives while strengthening accountability, risk management, and regulatory readiness across a global enterprise.

Responsibilities

Core Responsibilities

• Lead the enterprise‑wide data privacy program for a global organization, establishing the strategy, governance model, policies, standards, and controls required to manage privacy risk effectively.
• Serve as the senior subject‑matter expert on GDPR and other applicable privacy laws and regulations, translating legal requirements into practical business and operational controls.
• Act as the primary privacy advisor to the Chief Compliance Officer and senior leadership on strategic initiatives, emerging privacy risks, enforcement trends, and regulatory obligations.

Program Design, Rollout & Governance

• Design, implement, and mature a global data privacy program, including privacy governance forums, accountability structures, policies, procedures, notices, standards, and reporting mechanisms.
• Drive global rollout of privacy requirements across business units, functions, and geographies, ensuring consistent implementation while accommodating local legal and operational needs.
• Establish and maintain records of processing activities, data inventories, data retention standards, and privacy controls that support regulatory compliance and audit readiness.

Risk Assessment, Advisory & Operational Oversight

• Oversee privacy risk assessments, data protection impact assessments, transfer impact assessments, and control reviews for new and existing processing activities, products, systems, and business initiatives.
• Embed privacy by design and default into projects, digital platforms, data analytics use cases, HR processes, customer journeys, and vendor onboarding.
• Advise on lawful bases for processing, data subject rights, consent management, retention, anonymization, cookies, profiling, and cross‑border data transfer mechanisms.
• Partner closely with Legal, Compliance, Cybersecurity, IT, Procurement, HR, Internal Audit, and business leaders to ensure privacy obligations are operationalized effectively.

Monitoring, Incident Response & Regulatory Engagement

• Monitor compliance with privacy laws, internal policies, and program standards through audits, reviews, metrics, and ongoing assurance activities.
• Lead or coordinate the privacy response to personal data incidents and breaches, including assessment, escalation, regulatory notification support, remediation, and lessons learned.
• Act as a key point of contact for regulators, supervisory authorities, auditors, and external counsel on privacy‑related matters.
• Track developments in global privacy regulation and enforcement, assess organizational impact, and drive timely enhancements to the privacy framework.

Culture, Training & Leadership

• Build and lead privacy capability within the organization, including developing team members, defining accountability, and strengthening privacy awareness across all levels.
• Develop and deliver targeted privacy training and communication programs for executives, control functions, and high‑risk business areas.
• Provide regular updates, metrics, and strategic recommendations to senior leadership on the maturity and effectiveness of the privacy program.

Qualifications

• Bachelor’s degree in Law, Information Governance, Cybersecurity, Business, Compliance, or a related discipline.
• Relevant privacy or data protection certifications strongly preferred (e.g., CIPP/E, CIPP/M, CIPM, CIPT, or equivalent).
• Excellent English; Spanish and Arabic languages are an advantage in a global operating environment.
• Minimum 10 years’ experience in data privacy, data protection, compliance, legal, or related governance roles, including senior leadership responsibility in complex multinational organizations.
• Demonstrated experience designing and rolling out a data privacy program for a global company across multiple jurisdictions and business functions.
• Strong hands‑on GDPR experience, including privacy governance, DPIAs, records of processing, data subject rights, breach response, and cross‑border transfer compliance.
• Proven ability to partner with executive leadership and cross‑functional stakeholders to embed privacy by design into operations, technology, procurement, and strategic initiatives.
• Experience engaging with regulators, auditors, and external counsel on privacy matters is highly desirable.
• Strong analytical, policy drafting, communication, and leadership skills, with the ability to influence at board and executive level.