Manager - Data Protection

Role Overview

Manager - Data Protection at ADGM. The Data Protection Manager will support the Data Protection Officer (DPO) in delivering an effective data protection and privacy compliance framework across the ADGM, while helping ensure that ADGM personal data is handled in accordance with applicable laws and regulatory expectations and embedding a strong culture of accountability and responsible data use. The role includes responsibility for supporting the implementation and oversight of Artificial Intelligence (AI) governance.

Role Purpose

To support the DPO in implementing and maintaining a comprehensive data protection and privacy compliance framework, provide day-to-day guidance to business units on data protection obligations, conduct risk assessments, manage data subject requests and breach investigations, and promote a culture of responsible data use and AI governance across ADGM.

Key Responsibilities

Data Protection and Privacy Compliance

• Support the DPO in implementing and maintaining the organisation's data protection framework.
• Provide day-to-day advice on data protection obligations to business units.
• Assist in identifying appropriate lawful bases for processing activities.
• Conduct and support Data Protection Impact Assessments (DPIAs).
• Support maintenance and updates of Records of Processing Activities (RoPA).
• Draft and review privacy notices, policies, and procedures.
• Review and advise on data sharing agreements and processor contracts.
• Support responses to data subject rights requests, including access, rectification, and erasure.
• Assist in managing and investigating personal data breaches, including root cause analysis and remediation.
• Monitor compliance with data protection laws and regulations.
• Support internal audits and assurance activities.
• Deliver data protection training and awareness sessions to staff.
• Support cross-border data transfer assessments and safeguards.
• Assist with regulatory engagement and reporting obligations.
• Support development of data protection and AI governance metrics and reporting.
• Track and report on risks, issues, and remediation actions.
• Support continuous improvement of policies, controls, and processes.
• Promote a culture of data protection and responsible innovation across ADGM.

Team Management

• Create an environment where team members consistently drive to improve performance.
• Manage team with full accountability for achieving overall agreed objectives.
• Manage by effectively empowering team members.
• Take responsibility for mentoring high potential and most critical talent in their career progression.
• Review performance of team and address performance issues quickly through clear decisions.

Information Security

• Understand, adopt, adhere to and practice responsibilities and controls as per ADGM Information Security policy and best practices explained in induction and awareness sessions.
• Maintain confidentiality, integrity, and availability of ADGM information at all times, both within and outside ADGM.

Qualifications & Experience

• Bachelor's degree in Law, Information Governance, Cybersecurity, or related field.
• Minimum 10 years of experience in a data protection, privacy, or similar role.
• Relevant professional certification, such as CIPP/E or CIPM, or equivalent.
• Experience within a regulatory, public sector, or highly regulated environment is desirable.
• Exposure to AI, data analytics, or emerging technologies governance is preferred.

Skills & Competencies

• Strong understanding of data protection laws and principles, including UK GDPR or ADGM Data Protection Regulations 2021 or equivalent.
• Understanding of AI governance principles, including fairness, accountability, transparency, and risk management.
• Experience conducting DPIAs or similar risk assessments.
• Ability to interpret legal and regulatory requirements and apply them pragmatically.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and stakeholders.