Data Privacy

Role
: Data Privacy & Governance Senior ManagerLocation : Abu Dhabi
Role Purpose:The purpose of the Senior Data Privacy and Governance role is to ensure that ADIB group protects its customer’s data privacy, oversees the governance of data within the organization and meets the local and international privacy and data governance laws, regulations and requirements through globally accepted processes, technologies, governance and skillsets.The Senior Data privacy and Governance will Report to Data protection Officer *in ADIB and will act as Deputy DPOThe role will support ADIB to identify, assess and manage the data privacy and governance risk exposure and ensure that necessary controls (legal, compliance, information security, data processing, information technology) are implemented to mitigate financial (fines and loss of business) and reputational risks (resulting from a failure to protect customers privacy and data privacy breaches incidents) and improve data used for decision-making.The role is critical to ensure that ADIB has an appropriate, sustainable data privacy and governance strategy and internal capabilities to support current and future data privacy and governance needs.
Key Accountabilities of the role
Advise on ADIB compliance with data privacy and governance regulationsAct as Deputy Data protection officer as assigned by the CISOExecute and manage the DPIA assessments and its operational working across business , IT and Cyber security teamsAccountable for the delivery of Privacy budget approved projects on time and quality to meet Data governance and Privacy plansCreate and manage the Privacy controls framework , design monitoring metrics for risk and performance of Privacy across ADIBAble to assist in design of Data catalogues , data flow and Data quality for Data managers and owners to operate and produce high quality data across ADIBEffectively manage Data privacy and Data governance frameworks to integrate and operate under the enterprise risk framework inclusive of creation of practical Risk appetite for Privacy and Data governanceResponsible for maintaining and seeking approvals for Roles and responsibilities Matrix of Privacy framework and Data governance framework across ADIBOversee by monitoring the Subsidiaries and International business compliance to laws and regulations related to Data Privacy and Data governanceMonitor through designed metrics and controls and report ADIB group’s adherence to data protection, data governance & data privacy laws and regulationsDevelop and execute ADIB group data privacy and data governance plan as approved by the CISODrive ADIB group data privacy and data governance programsBuild and leads data privacy and governance unit and teamBuild data privacy and governance internal capabilitiesAct as point of contact with relevant staff and internal teams, as well as supervisory authorities in all relevant jurisdictions to ensure that the Bank’s data privacy and governance requirements are understood and adopted within appropriate timeframesEstimate and manage the budget allocated for data privacy and data governancePlan and implement the required central data privacy controls to achieve full compliance with regulatory requirements (e.g. GDPR)Identify, evaluate and enable the ongoing effectiveness of ADIB group data privacy and data governance activitiesConduct Data Privacy Impact Assessments where significant changes occur to ensure privacy by design (including cloud migrations/implementations) and ensure that data governance is considered as part of all projects/initiatives at the design stage.Own and monitor adherence to the data privacy and data governance policies and procedures within the groupEnsure the group addresses all queries from data subjects within legal timeframes (e.g. delete their information from the group’s databases and records)Liaise with other organizations/vendors who process data on behalf of and in conjunction with
the groupOffer consultation and advice on how to deal with privacy breachesFollow up with changes in the law and regulations and issue recommendations to ensure complianceOversee and provide guidance on data processing activities such as data identification and classification.Automate data privacy and governance management, where applicable.Assess implemented data privacy and governance controls effectiveness and compliance levels and propose mitigations and controls to address identified gapsEstablish data quality guidelines and metrics, and regularly monitor and report on data quality issues to stakeholders.Assist efforts to identify, classify, and document sensitive data, ensuring compliance with data privacy regulations such as GDPR, CCPA, etc.Review and oversee data governance workflows, including for data lineage, data access controls, and data retention policies.Lead efforts with IT teams to implement data governance tools and technologies that support data lineage, data cataloging, and metadata management.Ensure that enterprise data assets are governed by comprehensive data management approaches, governance models, frameworks, and methodologiesApprove data privacy and data governance exception requests and recommend appropriate actions as necessaryCollaborate with risk and compliance teams to ensure data governance and privacy practices align with internal policies and external regulations.Serve as a subject matter expert on data governance and data privacy matters, providing guidance and training to employees on data policies and best practices.Collaborate with external vendors and partners to ensure data governance and data privacy standards are maintained in outsourced processes.Participate in audits and assessments related to data governance and compliance.Discover data within the organization and determine gaps in the data governance controls pertaining to critical data.Oversee data processes around data profiling, data cataloguing, metadata creation and management, master data management and data quality.Support and maintain an inventory/catalogue of the enterprise information maps, including authoritative systems, ownersSupport the strategic requirements of the bank, reducing the data risk and enabling value for the business.Oversee the management of cross-border and intra-jurisdictional data transfers
Specialist Skills / Technical Knowledge Required for this role:
High and demonstrable knowledgeable in privacy rules and regulations in developed marketsKnowledge of data privacy and protection systems/solutionsFamiliarity with financial institution operations, processes and modus operandiKnowledge of information security processes and data protection softwareKnowledge of GDPR, OECD privacy Guidelines and Local and International privacy lawsSpecial expertise in data protection role capable of advising senior management,Bachelor’s degree in Information Systems, Computer Science or any related discipline.Abilities to read and understand laws, rules and regulations on data privacy and data governanceStrong analytical skills, problem solving, consulting and report writingDemonstrated leadership skills achieving stated objectives involving a diverse set of stakeholders and managing various projectsDemonstrated negotiation skills to interface successfully with different stakeholders.Demonstrated client relationship skills to continuously coordinate with controllers and processors while maintaining independence roleDemonstrated communication skills to speak with a wide-ranging audience.Strong presentation skills, training delivery and excellent verbal and written communication skillsExperience with large-scale data or project management and oversight.Knowledge of data governance practices, business and technology issues related to management of enterprise information assets and approaches related to data privacy
Previous Experience:
12-15 years of experience in information technology or information security data and privacy, governance in financial institutions with a focus on data security, privacy and governance5+ years of experience and knowledge of global privacy laws in various regions (e.g. GDPR), including drafting of privacy policies, technology provisions and outsourcing agreementsExperience of Implementing Data Governance framework and policiesExperience in technical training and awareness raising.Experience in dealing successfully with different business cultures and industries.
#J-18808-Ljbffr

---