Data Privacy & Protection Officer

techcarrot is seeking a Data Privacy & Protection Officer to lead and oversee the implementation of the Enterprise Data Privacy & Protection programme across the organization. This role ensures compliance with applicable data protection regulations and privacy requirements, embedding privacy-by-design principles. Join us in Dubai as we continue our digital transformation journey.

techcarrot is a leading global IT services provider and trusted digital transformation partner, headquartered in Dubai and ISO/IEC 27001:2022 certified. We serve clients worldwide with a people-first philosophy, "We Care".

We deliver solutions across six practice areas including Digital Solutions, Enterprise Application Solutions, Data Analytics & AI, Cyber Security & GRC, Infrastructure & Cloud, and Quality Engineering. We engage, enhance, and exceed, simplifying digital transformation.

Company Overview

techcarrot is a leading global IT services provider and trusted digital transformation partner, headquartered in Dubai and ISO/IEC 27001:2022 certified. Our UAE operations serve the Middle East and Africa, India drives Asia-Pacific, and our footprint extends to the USA and the Netherlands. We are driven by our people-first philosophy, "We Care", shaping everything we do.

We deliver across six practice areas: Digital Solutions, Enterprise Application Solutions (SAP, Oracle, Salesforce, Microsoft, Odoo), Data Analytics & AI, Cyber Security & GRC, Infrastructure & Cloud, and Quality Engineering serving Retail, FMCG, Real Estate, Financial Services, Healthcare, Government, and Technology. Our ISO/IEC 27001:2022 certification reflects our commitment to the highest standards of information security.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Qualifications: Bachelor’s degree
• Experience: 10 Year+

Key Responsibilities

• Lead the implementation and continuous improvement of the Enterprise Data Privacy & Protection framework, policies, guidelines and controls.
• Monitor regulatory developments and provide guidance on applicable data protection laws across the Middle East and Southeast Asia.
• Lead and oversee DPIAs, privacy risk assessments and privacy-by-design reviews for business initiatives, applications, AI solutions, and data platforms.
• Oversee Personal Data mapping, Records of Processing Activities (RoPA), data lifecycle management, and consent management.
• Establish and oversee processes for Data Subject Rights requests, privacy complaints, and Personal Data breach assessments.
• Lead privacy assessments of vendors, processors, third-party integrations, data sharing arrangements and international data transfers.
• Advise senior management and business stakeholders on privacy risks and obligations, and drive privacy awareness and training.

Requirements

• Strong expertise in Data Privacy & Protection governance, regulatory compliance, and privacy risk management.
• In-depth knowledge of Middle East and Southeast Asian data protection regulations.
• Expertise in conducting DPIAs, privacy risk assessments, RoPA, and Personal Data mapping.
• Strong knowledge of cross-border data transfers, international data sharing, and third-party privacy risk assessments.
• Excellent stakeholder management, advisory, analytical and communication skills.
• Experience in implementing and managing enterprise privacy tools and platforms such as OneTrust, Securiti.ai, BigID or equivalent solutions.
• Professional certifications such as CIPP/E, CIPP/A, CIPM, CIPT, CDPSE, ISO 27701 considered an advantage.

Benefits

• Opportunity to lead and shape the data privacy program in a leading digital transformation partner.
• Work with a global team and diverse client base across various industries.
• Contribute to a company culture that prioritizes "We Care" and people-first philosophy.
• Gain exposure to a wide range of technologies and practice areas.
• Be part of an ISO/IEC 27001:2022 certified organization committed to high standards.