Regional Privacy & Data Protection Lead

techcarrot; Dubai; On-site; AED 420,000 - 650,000; Full time

Job summary

techcarrot is seeking a Data Privacy & Protection Officer to lead the Enterprise Data Privacy & Protection programme across the organization. You will ensure compliance with data protection regulations, embed privacy-by-design, and collaborate with Legal, Compliance, Information Security and business teams.

You will run privacy governance, DPIAs, RoPA, data mapping, breach assessments and cross-border data transfer reviews, while guiding senior leadership and driving privacy improvements across

Qualifications

• Experience building and governing enterprise privacy frameworks across regions.
• Ability to interpret UAE PDPL, GCC privacy requirements and international regulations.

Responsibilities

• Lead implementation of privacy framework, policies and controls across the organization.
• Provide guidance on data protection laws and regulatory changes in ME/SEA regions.
• Oversee DPIAs, privacy risk assessments and privacy-by-design reviews.
• Manage data mapping, RoPA, data lifecycle and consent management.
• Lead data subject rights handling, breach assessments and regulatory notifications.
• Oversee third-party privacy assessments and cross-border data transfer safeguards.
• Coordinate privacy awareness, reporting and stakeholder engagement.

Skills

Data privacy governance

Regulatory compliance

DPIAs

RoPA

Cross-border transfers

Stakeholder management

Privacy-by-design

OneTrust

ISO 27701

GDPR

Education

Bachelor’s degree in Law/IT/InfoSec

Professional privacy certifications

Tools

OneTrust

Securiti.ai

BigID

Job description

techcarrot is seeking a Data Privacy & Protection Officer to lead the Enterprise Data Privacy & Protection programme across the organization. You will ensure compliance with data protection regulations, embed privacy-by-design, and collaborate with Legal, Compliance, Information Security and business teams.

You will run privacy governance, DPIAs, RoPA, data mapping, breach assessments and cross-border data transfer reviews, while guiding senior leadership and driving privacy improvements across