Data Privacy Manager
Posted 13 Oct 2026
Advertised as “Data Privacy Senior Manager”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 8+ yrs
- Management level
- People management
No salary listed for this role.
Field of studyInformation Security, Information Technology, Law, Risk Management (or related)
Study levelBachelor's
CertificationsCIPP/E, CIPM, CIPT, CDPO, CISA, CISM
Study levelPost-doctorate
Role : Senior Manager – Data Privacy Governance
Location : Abu Dhabi
Role Purpose:
To lead the data privacy governance pillar of ADIB’s Data Privacy Function within the Group Information Security Department (GISD), by designing, implementing and continuously improving the Bank’s privacy governance framework – policies, standard operating procedures, records of processing, privacy risk management and regulatory reporting.
The role ensures that ADIB, its subsidiaries and branches process personal data in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), CBUAE Consumer Protection Regulation & Standards and other applicable local and international data protection requirements, and provides assurance to Senior Management, Board Committees and regulators on the effectiveness of the privacy control environment.
Key Accountabilities of the role
Privacy Governance Framework
-
Own, draft and maintain the Data Privacy Framework, Policy, Standards, SOPs and supporting templates, including version control, approval workflows and periodic review cycles.
-
Maintain the regulatory obligation register and mapping of PDPL, CBUAE and other applicable requirements to internal controls, and ensure the supporting evidence library is complete and audit-ready.
Records of Processing and Data Mapping
-
Oversee the Record of Processing Activities (RoPA) program end to end – Business Unit onboarding, completeness and quality review, escalation and periodic refresh – ensuring consistency across all ADIB jurisdictions.
-
Govern the privacy management platform (OneTrust) as the single source of truth for RoPA, assessments, consent and incident records.
Privacy Risk, Assessments and Assurance
-
Govern the privacy risk management process, including risk identification, assessment, mitigation, and recording of residual risk in the Bank’s GRC tool (Archer) in line with the Operational Risk Management framework.
-
Lead the governance of Data Protection Impact Assessments (DPIA) and International Data Transfer Assessments, including review, challenge and sign-off of business submissions.
-
Define, monitor and report privacy KPIs and KRIs, and prepare reporting packs for Senior Management, the CISO, Management Risk Committee and Board-level committees.
Data Subject Rights, Consent and Transparency