Data Privacy

Role       : Data Privacy & Governance Senior Manager
Location : Abu Dhabi                            
Role Purpose:
The purpose of the Senior Data Privacy and Governance role is to ensure that ADIB group protects its customer’s data privacy, oversees the governance of data within the organization and meets the local and international privacy and data governance laws, regulations and requirements through globally accepted processes, technologies, governance and skillsets.

The Senior Data privacy and Governance will Report to Data protection Officer *in ADIB and will act as Deputy DPO

The role will support ADIB to identify, assess and manage the data privacy and governance risk exposure and ensure that necessary controls (legal, compliance, information security, data processing, information technology) are implemented to mitigate financial (fines and loss of business) and reputational risks (resulting from a failure to protect customers privacy and data privacy breaches incidents) and improve data used for decision-making.

The role is critical to ensure that ADIB has an appropriate, sustainable data privacy and governance strategy and internal capabilities to support current and future data privacy and governance needs. 
    
Key Accountabilities of the role      
 

• Advise on ADIB compliance with data privacy and governance regulations 
• Act as Deputy Data protection officer as assigned by the CISO
• Execute and manage the DPIA assessments and its operational working across business , IT and Cyber security teams
• Accountable for the delivery of Privacy budget approved projects on time and quality to meet Data governance and Privacy plans
• Create and manage the Privacy controls framework , design monitoring metrics for risk and performance of Privacy across ADIB
   
• Able to assist in design of Data catalogues , data flow and Data quality for Data managers and owners to operate and produce high quality data across ADIB
• Effectively manage Data privacy and Data governance frameworks to integrate and operate under the enterprise risk framework inclusive of creation of practical Risk appetite for Privacy and Data governance 
• Responsible for maintaining and seeking approvals for Roles and responsibilities Matrix of Privacy framework and Data governance framework across ADIB
• Oversee by monitoring the Subsidiaries and International business compliance to laws and regulations related to Data Privacy and Data governance 
• Monitor through designed metrics and controls and report ADIB group’s adherence to data protection, data governance & data privacy laws and regulations 
• Develop and execute ADIB group data privacy and data governance plan as approved by the CISO
• Drive ADIB group data privacy and data governance programs
• Build and leads data privacy and governance unit and team
• Build data privacy and governance internal capabilities 
• Act as point of contact with relevant staff and internal teams, as well as supervisory authorities in all relevant jurisdictions to ensure that the Bank’s data privacy and governance requirements are understood and adopted within appropriate timeframes
• Estimate and manage the budget allocated for data privacy and data governance
• Plan and implement the required central data privacy controls to achieve full compliance with regulatory requirements (e.g. GDPR) 
• Identify, evaluate and enable the ongoing effectiveness of ADIB group data privacy and data governance activities
• Conduct Data Privacy Impact Assessments where significant changes occur to ensure privacy by design (including cloud migrations/implementations) and ensure that data governance is considered as part of all projects/initiatives at the design stage.
• Own and monitor adherence to the data privacy and data governance policies and procedures within the group
• Ensure the group addresses all queries from data subjects within legal timeframes (e.g. delete their information from the group’s databases and records)
• Liaise with other organizations/vendors who process data on behalf of and in conjunction with  the group
• Offer consultation and advice on how to deal with privacy breaches
• Follow up with changes in the law and regulations and issue recommendations to ensure compliance
• Oversee and provide guidance on data processing activities such as data identification and classification.
• Automate data privacy and governance management, where applicable. 
• Assess implemented data privacy and governance controls effectiveness and compliance levels and propose mitigations and controls to address identified gaps
• Establish data quality guidelines and metrics, and regularly monitor and report on data quality issues to stakeholders.
• Assist efforts to identify, classify, and document sensitive data, ensuring compliance with data privacy regulations such as GDPR, CCPA, etc.
• Review and oversee data governance workflows, including for data lineage, data access controls, and data retention policies.
• Lead efforts with IT teams to implement data governance tools and technologies that support data lineage, data cataloging, and metadata management.
• Ensure that enterprise data assets are governed by comprehensive data management approaches, governance models, frameworks, and methodologies
• Approve data privacy and data governance exception requests and recommend appropriate actions as necessary
• Collaborate with risk and compliance teams to ensure data governance and privacy practices align with internal policies and external regulations.
• Serve as a subject matter expert on data governance and data privacy matters, providing guidance and training to employees on data policies and best practices.
• Collaborate with external vendors and partners to ensure data governance and data privacy standards are maintained in outsourced processes.
• Participate in audits and assessments related to data governance and compliance.
• Discover data within the organization and determine gaps in the data governance controls pertaining to critical data.
• Oversee data processes around data profiling, data cataloguing, metadata creation and management, master data management and data quality. 
• Support and maintain an inventory/catalogue of the enterprise information maps, including authoritative systems, owners
• Support the strategic requirements of the bank, reducing the data risk and enabling value for the business. 
• Oversee the management of cross-border and intra-jurisdictional data transfers
   

Specialist Skills / Technical Knowledge Required for this role:
 

• High and demonstrable knowledgeable in privacy rules and regulations in developed markets
• Knowledge of data privacy and protection systems/solutions 
• Familiarity with financial institution operations, processes and modus operandi
• Knowledge of information security processes and data protection software 
• Knowledge of GDPR, OECD privacy Guidelines and Local and International privacy laws
• Special expertise in data protection role capable of advising senior management, 
• Bachelor’s degree in Information Systems, Computer Science or any related discipline. 
• Abilities to read and understand laws, rules and regulations on data privacy and data governance
• Strong analytical skills, problem solving, consulting and report writing 
• Demonstrated leadership skills achieving stated objectives involving a diverse set of stakeholders and managing various projects
• Demonstrated negotiation skills to interface successfully with different stakeholders.
• Demonstrated client relationship skills to continuously coordinate with controllers and processors while maintaining independence role
• Demonstrated communication skills to speak with a wide-ranging audience.
• Strong presentation skills, training delivery and excellent verbal and written communication skills
• Experience with large-scale data or project management and oversight.
• Knowledge of data governance practices, business and technology issues related to management of enterprise information assets and approaches related to data privacy

Previous Experience:

• 12-15 years of experience in information technology or information security data and privacy, governance in financial institutions with a focus on data security, privacy and governance
• 5+ years of experience and knowledge of global privacy laws in various regions (e.g. GDPR), including drafting of privacy policies, technology provisions and outsourcing agreements
• Experience of Implementing Data Governance framework and policies 
• Experience in technical training and awareness raising.
• Experience in dealing successfully with different business cultures and industries.