Data Protection Officer - Internal Audit

About the Company

Responsibilities

• ● Lead data protection and privacy activities across group operations and support functions.
• ● Ensure alignment with data protection policies, data classification standards, and applicable regulations.
• ● Support data governance activities, including data classification, labelling, and Records of Processing Activities.
• ● Conduct risk assessments, DPIAs, transfer impact assessments, and maintain the privacy risk register.
• ● Perform audits covering IT General Controls, information security, cyber security, data processing activities, systems, vendors, and third parties.
• ● Review vendor arrangements, data processing agreements, and privacy due diligence requirements.
• ● Support personal data breach response, including investigation, impact assessment, and regulatory notification.
• ● Deliver data protection awareness and training across the organisation.
• ● Work closely with Internal Audit, IT, and business teams to assess controls across ERP, CRM, HR, e-commerce, SaaS platforms, and emerging technologies.
• ● Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.
• ● -3 years of experience in IT internal audit, information security audit, technology compliance, or consulting.
• ● Hands-on audit experience is essential.
• ● Knowledge of ISO 27001, COBIT, NIST CSF, UAE PDPL, ADHICS, KSA PDPL/SDAIA, Oman PDPL, GDPR, ISO/IEC 27701, or NIST Privacy Framework.
• ● Strong report-writing, communication, and stakeholder management skills.
• ● CIA, CISA, ISO 27701 Lead Implementer/Auditor, or equivalent certification.
• ● Familiarity with GRC platforms and AI governance concepts.