Information Protection Senior Analyst

Nas Neuron Health Services - A certified Great Place to Work is dedicated to simplifying healthcare and making it more accessible.

We prioritize seamless experiences, excellence in health insurance management, and innovative technology to better serve our clients and partners.

Rooted in our core values—Growth Mindset, Excellence, Resilience, Reliability, and Integrity—we provide clarity, protection, and efficiency at every step.

Role Purpose:

The Information Protection Senior Analyst is a pivotal role responsible for establishing, implementing, and maintaining a robust data protection and compliance framework across the organization. This role ensures that all personal data collected, processed, and stored by the company complies with applicable data protection laws and regulations, including GDPR and local data protection acts.

The Information Protection Senior Analyst leads the development and implementation of privacy frameworks, monitors data processing activities, and acts as the primary contact for the UAE Data Office and other regulatory bodies. This role is critical in safeguarding sensitive customer and employee data, managing privacy risks, and promoting a culture of data protection across the organization.

Key Accountabilities of the role

• Ensure full compliance with data protection laws and insurance-specific regulatory requirements with UAE regulations (like DIFC DP Law and VARA frameworks), as well as international standards such as GDPR.
• Create policies for secure KYC/AML data handling, data privacy, and protection that meet the scrutiny of regulators and auditors.
• Act as the go-to liaison for regulators and other external stakeholders when it comes to all thing's security and compliance.
• Provides a framework for managing complex issues related to the use of data.
• Serves as the subject matter expert for the creation of privacy compliance training and privacy/data protection
• Develop and enforce data privacy policies, procedures, and controls.
• Conduct Data Protection Impact Assessments (DPIAs) for systems and processes.
• Promotes and embeds a privacy and data protection culture within the organization.
• Assesses, develops, implements, tests and monitors processes to ensure NNHS compliance with applicable privacy laws and regulations.
• Monitor and audit data processing activities.
• Provide training and guidance to staff on data protection responsibilities.
• Act as liaison with the Data Commissioner and other regulatory bodies during audits or investigations.
• Respond to data subject requests and manage data breach incidents effectively.
• Handle data subject access requests and complaints.
• Manage data breaches and coordinate with regulators.
• Maintain records of processing activities (RoPA).
• Provide training and awareness programs for staff.
• Advise on contractual clauses related to data protection.

Key Skills

• Minimum 5 years of experience in data protection, compliance, or legal advisory roles.
• Experience as a Data Protection Officer, with demonstrable experience in UAE data protection laws, regulations, rules, and guidance
• In-depth knowledge of data protection laws (e.g., GDPR, UAE Data Protection Law, DIFC DP Law).
• Understanding of insurance operations and how personal data is used across underwriting, claims, and customer service.
• A track record of successfully engaging with UAE regulators
• Knowledge and experience of regulatory requirements relating to data protection and privacy
• Risk assessment and mitigation skills.
• Strong communication and training abilities to engage stakeholders at all levels.
• Analytical thinking and attention to detail.
• Project management and organizational skills.
• IT and cybersecurity awareness, especially in relation to data storage and transfer.
• Ability to act independently, conflict resolution and stakeholder management
• The ability to work well under pressure, manage multiple projects at once with close attention to detail, and meet tight deadlines.
• An understanding of the interplay between compliance risk and business risk
• A solution-oriented mindset for complex privacy and data protection problems
• The ability to communicate positively with members of various internal teams and regulators
• Demonstrated sound judgement
• Solid analytical, communication, and interpersonal skills

Preferred/Nice to have

• Experience working on regulatory investigations and dealing with breach investigations
• Knowledge of international data transfer requirements, restrictions, and solutions
• Experience in compliance risk management within a consultancy, compliance function, or regulators

Qualifications

• Bachelor's degree in Information Technology, Law, Information Security, Business Administration, or a related field.
• IAPP certification (e.g., CIPP, CIPM, or CIPT) strongly preferred
• Professional certifications such as:
• CIPP/E (Certified Information Privacy Professional – Europe)
• CIPM (Certified Information Privacy Manager)
• Certified Data Protection Officer (CDPO) – UAE - specific training is available
• Experience in the insurance or financial services sector is highly preferred.
• Must reside in the UAE or be part of a Group entity with similar responsibilities