About the Role:
As a member of the MedNet Group, a leading Third-Party Administrator (TPA) serving the healthcare and insurance sectors across the MEA region, we are seeking an experienced Data Protection Officer (DPO). The DPO will be responsible for overseeing and promoting compliance with applicable data protection and privacy laws, regulations, and internal requirements. Acting as an independent subject matter expert, the DPO will provide guidance and oversight to management, employees, and business functions regarding the lawful, fair, and secure processing of personal data.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
This role reports directly to the Chief Compliance Officer and maintains a functional reporting line to the company Data Protection Team. The DPO will also intermittently report to the company Regional Head of Legal and Compliance regarding data protection-related issues. This position supports the development, implementation, and continuous improvement of the MedNet Group data protection framework and serves as the central point of contact for data protection regulators, data subjects, and company Group stakeholders concerning privacy matters.
Your Role:
- Maintain and enhance the Data Protection Framework, policies, and procedures to ensure compliance with data protection laws and regulatory requirements across MedNet jurisdictions, reporting to management and relevant governance committees in a timely manner.
- Deliver the annual Data Protection Monitoring Plan, conduct monitoring reviews, identify and report key privacy risks, provide recommendations, and track agreed remediation actions through to closure.
- Review and advise on Data Protection Impact Assessments (DPIAs) for high-risk processing activities, ensuring these assessments are completed before implementation and that resulting management actions are effectively monitored.
- Oversee personal data breach and privacy incident management, including timely assessment and documentation, regulatory notifications where required, root cause analysis for significant incidents, and monitoring of corrective actions.
- Monitor data subject rights requests across relevant entities, ensuring statutory response requirements are met while identifying and escalating significant trends, recurring issues, complaints, or regulatory inquiries.
- Drive data protection training and awareness initiatives, including annual mandatory training and targeted awareness sessions for high-risk business functions to enhance employees' privacy awareness.
- Provide privacy oversight for third-party risk assessments, outsourcing, data-sharing arrangements, and cross-border transfers, ensuring compliance with local laws and company Group transfer requirements; escalate non-compliant arrangements.
- Support regulatory inspections, audits reporting, and requests, engage with company Data Protection and Regional Legal & Compliance teams, monitor legislative developments, maintain privacy metrics and management reporting, and drive continuous improvement and maturity of the privacy program.
Your Profile:
Minimum Qualifications:
- Bachelor's degree in Law, Compliance, Information Governance, Information Security, Risk Management, or a related discipline.
- Recognized certification in Data Protection or Privacy preferred (e.g., CIPP/E, CIPM, CIPT, CDPO or equivalent).
- Additional qualifications in compliance, governance, or risk management are advantageous.
Minimum Experience:
- At least 4 years of experience in data protection, privacy, compliance, legal, governance, or risk management functions.
- Experience advising on data protection requirements within regulated industries such as healthcare, insurance, or financial services.
- Experience conducting or overseeing privacy impact assessments, privacy compliance reviews, and breach management activities.
- Experience engaging with regulators, auditors, and senior stakeholders.
- Experience in a multinational or matrix reporting environment is advantageous.
Equal Opportunity Employer:
The company is committed to fairness and equality, and it stands as an equal opportunities employer.
