AI, Data Governance & Privacy Officer I Dubai | Financial Services| Orient Insurance PJSC

Role Summary

The AI, Data Governance & Privacy Officer is responsible for establishing and operating the enterprise-wide governance framework for data, artificial intelligence, privacy, and responsible digital innovation.

The role serves as the second-line governance authority for AI and data, ensuring that the organisation maximises the value of data and AI while maintaining compliance with regulatory requirements, ethical standards, privacy obligations, and enterprise risk management principles.

The officer will lead the development of data governance and AI governance frameworks, oversee privacy compliance programmes, drive trustworthy AI adoption, and act as the organisational subject matter expert on data protection, AI risk management, and information governance.

This role is particularly critical as the organisation expands the use of Agentic AI, Generative AI, advanced analytics, machine learning, intelligent automation, and enterprise data platforms across underwriting, claims, finance, reinsurance, customer service, and corporate operations.

Create governance models for

1. Agentic AI
2. Generative AI
3. Machine Learning
4. Advanced Analytics
5. Intelligent Automation

Chair the AI Governance Committee.

Define AI approval and risk assessment processes.

Ensure AI initiatives align with

1. Regulatory requirements
2. Ethical AI principles
3. Security policies
4. Business objectives

Implement AI lifecycle governance across development, deployment, monitoring, and retirement.

Develop controls for

Explainability

Fairness

Bias management

Human oversight

Model monitoring

Prompt governance

Auditability

1. Data Governance & Information Management

Develop and operate the enterprise data governance framework.

Establish data ownership and stewardship models.

UAE PDPL

1. DIFC Data Protection Law
2. GDPR
3. Other applicable regional privacy regulations

Define and maintain enterprise privacy frameworks.

Conduct and oversee

1. Data Protection Impact Assessments (DPIAs)
2. Privacy Risk Assessments
3. Third-party Privacy Reviews

Establish Privacy by Design practices across business and technology initiatives.

Manage

Data Subject Rights Requests

Consent management processes

Cross-border transfer assessments

Breach response governance

1. AI Risk & Model Governance

Define model governance standards.

Establish model risk management processes.

Classify AI systems based on risk and criticality.

Model validation

Performance monitoring

Drift detection

Human-in-the-loop oversight

Maintain an enterprise AI model inventory.

Conduct periodic AI risk assessments.

Ensure regulatory readiness for emerging AI regulations.

1. Regulatory Compliance & Audit

Monitor evolving AI, privacy, and data regulations globally.

Translate regulatory requirements into governance controls.

Coordinate regulatory responses and examinations.

Support Internal Audit, Risk, Compliance, and External Audit activities.

Maintain evidence repositories for governance and compliance activities.

Lead remediation of governance and privacy findings.

1. Vendor, Third-Party & Cloud Governance

Define governance requirements for AI vendors and data processors.

Review

SaaS contracts

AI solution providers

Data sharing arrangements

Third-party processing agreements

Assess external AI platforms for privacy, security, compliance, and ethical risk.

Establish governance controls for third-party LLMs and foundation model providers.

1. Governance Awareness & Culture

Practical experience governing

1. AI/ML platforms
2. Cloud platforms
3. Enterprise data environments

Responsibilities

1. Enterprise AI Governance

• Establish and maintain the enterprise AI Governance Framework.
• Define policies, standards, controls, and operating procedures for AI usage.

Develop enterprise-wide training programmes on

1. Responsible AI
2. Data governance
3. Data protection
4. Information handling

• Build a culture of responsible innovation.
• Conduct executive awareness sessions and governance workshops.
• Develop reporting dashboards and governance KPIs.

Requirements

• Define enterprise standards for
• Data quality
• Metadata management
• Master data management
• Data lineage
• Data retention

Data classification

• Lead enterprise data cataloguing and inventory programmes.
• Implement data governance tooling and controls.
• Develop governance measures for structured and unstructured data.
• Drive data quality improvement initiatives across business functions.
• Establish governance for enterprise data platforms, analytics environments, GenAI platforms, and data lakes.

1. Privacy & Data Protection

Act as Data Protection Officer (where required by regulation).

Skills

Required Skills to be successful

Education

• Bachelor's Degree in Computer Science, Information Systems, Data Science, Cybersecurity, Law, or related field.
• Master's Degree preferred.
• 10+ years of experience in data governance, privacy, risk, information management, or technology governance.
• Minimum 5 years leading enterprise governance initiatives.
• Experience within insurance, financial services, banking, or regulated industries preferred.

About the Company

Why Join HealthHub?

We Hear Your Ambition.

For over 90 years, the Al-Futtaim Group has been bringing the world’s leading brands of lifestyle watches, cars, home furnishings and fashion to the UAE. The Group has now introduced a whole new way of holistic healthcare through HealthHub Clinics by Al-Futtaim, its multi-speciality chain of more than 20 clinics in Dubai with over 25 specialties offering the right combination of advanced diagnostics, proven medical expertise and specialised services.

What gives our clinics an edge is that as a part of the Al-Futtaim Group, you can expect world-class quality standards, with access to the best medical services and facilities within a healing environment. It’s a new way of healthcare that’s designed to meet a patient’s needs with a complete range of smart healthcare solutions. As testimony to this, only recently, we’ve earned a rare milestone of being the only primary healthcare network in the UAE to receive the Gold Seal by a reputed international body: Accreditation Canada.

As trusted partners to health, we at HealthHub Clinics adopt evidence-based learning that enables us to listen to our patients more carefully. It helps us in treating the cause and not just the symptoms, while applying global best practices to ensure quality of care for every family member. Most of all, we adopt a patient-centric approach to healthcare that is reflected in the promise of our core belief: “We Hear You.”

5-day working week