Role Purpose
The role is responsible forensuringInnovocomplies with UAEand UKdata protectionand retentionlaws, including PDPL and GDPR,regulatory requirements,andany other relevant datacompliancerules. The roleis responsible for establishing, implementing, and maintaining data governancecontrols and processes across the group.This role goes beyond personal data protection and focuses onthe full lifecycle management of all business-critical dataacrossthe group.
Key Accountabilities
- Develop, implement, andmaintaina datagovernance andprotection framework aligned with UAE's retention rulesandPDPL and UK GDPR requirements.
- Monitor compliance withdata-relatedregulations, retention laws,data protectionpoliciesandprocedures.
- Define data ownership roles, data classification models, retention rules, handlingrequirementsand decision-making structures.
- Serve as the primary point of contact on data protection matters for management, employees, and regulators.
- Advise on privacy-by-design andData Protection Impact Assessments (DPIAs) whenrequired.
- Lead the handling of personal data breaches, from identification to remediation, working withLegal and HR to coordinate breach notifications to the UAE Data Office, and UK Information Commissioner Office asrequired.
- Develop and deliver data protection and privacy training across the group.
- Oversee responses to data subject access, correction, deletion restriction, and objection requests, ensuring requests are handled within statutory timelines.
- Input into 3rdparty risk management framework, ensuring all contracts include proper datarelatedregulation andprotectionclauses and safeguards.
- Prepare compliance reports for management and regulators.
- Maintain anup to datedata inventory, retention schedules, and compliance records.
Qualifications, Experience, Knowledge & Skills
- Bachelor's degree or higher (Master'spreferred), in Law, Information Security or related field.
- Minimum 10years experiencein data protection, data governance, data compliance, privacy,complianceor information security
- Knowledge of data lifecycle management and retention frameworks
- Experience with UAE PDPL, and knowledge of UK GDPR
- Experience ininformation security controls, risk management, and privacy operations
- Strong knowledge of UAE,UKandinternational privacy frameworks
- Knowledge of ISO27701, ISO27001
- High levelof integrity, independence, and confidentiality
- Excellent communication and stakeholder management skills
