AI, Data Governance & Privacy Officer

Job Requisition ID: 180984

Established in the 1930s as a trading business, Al-Futtaim Group today is one of the most diversified and progressive, privately held regional businesses headquartered in Dubai, United Arab Emirates. Structured into five operating divisions; automotive, financial services, real estate, retail and healthcare; employing more than 35,000 employees across more than 20 countries in the Middle East, Asia and Africa, Al-Futtaim Group partners with over 200 of the world's most admired and innovative brands. Al-Futtaim Group’s entrepreneurship and relentless customer focus enables the organization to continue to grow and expand; responding to the changing needs of our customers within the societies in which we operate.

By upholding our values of respect, excellence, collaboration and integrity; Al-Futtaim Group continues to enrich the lives and aspirations of our customers each and every day

Job Description:

The AI, Data Governance & Privacy Officer is responsible for establishing and operating the enterprise-wide governance framework for data, artificial intelligence, privacy, and responsible digital innovation.

The role serves as the second-line governance authority for AI and data, ensuring that the organisation maximises the value of data and AI while maintaining compliance with regulatory requirements, ethical standards, privacy obligations, and enterprise risk management principles.

The officer will lead the development of data governance and AI governance frameworks, oversee privacy compliance programmes, drive trustworthy AI adoption, and act as the organisational subject matter expert on data protection, AI risk management, and information governance.

This role is particularly critical as the organisation expands the use of Agentic AI, Generative AI, advanced analytics, machine learning, intelligent automation, and enterprise data platforms across underwriting, claims, finance, reinsurance, customer service, and corporate operations.

What you will do

1. Enterprise AI Governance

• Establish and maintain the enterprise AI Governance Framework.

• Define policies, standards, controls, and operating procedures for AI usage.

• Create governance models for:

• Agentic AI
• Generative AI
• Machine Learning
• Advanced Analytics
• Intelligent Automation

• Chair the AI Governance Committee.

• Define AI approval and risk assessment processes.

• Ensure AI initiatives align with:

• Regulatory requirements
• Ethical AI principles
• Security policies
• Business objectives

• Implement AI lifecycle governance across development, deployment, monitoring, and retirement.

• Develop controls for:
• Explainability
• Fairness
• Bias management
• Human oversight
• Model monitoring
• Prompt governance
• Auditability

2. Data Governance & Information Management

• Develop and operate the enterprise data governance framework.

• Establish data ownership and stewardship models.

• Define enterprise standards for:

• Data quality
• Metadata management
• Master data management
• Data lineage
• Data retention
• Data classification

• Lead enterprise data cataloguing and inventory programmes.

• Implement data governance tooling and controls.

• Develop governance measures for structured and unstructured data.

• Drive data quality improvement initiatives across business functions.

• Establish governance for enterprise data platforms, analytics environments, GenAI platforms, and data lakes.

3. Privacy & Data Protection

• Act as Data Protection Officer (where required by regulation).

• Lead compliance with:

• UAE PDPL
• DIFC Data Protection Law
• GDPR
• Other applicable regional privacy regulations

• Define and maintain enterprise privacy frameworks.

• Conduct and oversee:

• Data Protection Impact Assessments (DPIAs)
• Privacy Risk Assessments
• Third-party Privacy Reviews

• Establish Privacy by Design practices across business and technology initiatives.

• Manage:

• Data Subject Rights Requests
• Consent management processes
• Cross-border transfer assessments
• Breach response governance

4. AI Risk & Model Governance

• Define model governance standards.

• Establish model risk management processes.

• Classify AI systems based on risk and criticality.

• Develop controls for:

• Model validation
• Performance monitoring
• Drift detection
• Explainability
• Human-in-the-loop oversight

• Maintain an enterprise AI model inventory.

• Conduct periodic AI risk assessments.

• Ensure regulatory readiness for emerging AI regulations.

5. Regulatory Compliance & Audit

• Monitor evolving AI, privacy, and data regulations globally.

• Translate regulatory requirements into governance controls.

• Coordinate regulatory responses and examinations.

• Support Internal Audit, Risk, Compliance, and External Audit activities.

• Maintain evidence repositories for governance and compliance activities.

• Lead remediation of governance and privacy findings.

6. Vendor, Third-Party & Cloud Governance

• Define governance requirements for AI vendors and data processors.

• Review:

• SaaS contracts
• AI solution providers
• Data sharing arrangements
• Third-party processing agreements

• Assess external AI platforms for privacy, security, compliance, and ethical risk.

• Establish governance controls for third-party LLMs and foundation model providers.

7. Governance Awareness & Culture

• Develop enterprise-wide training programmes on:

• Responsible AI
• Data governance
• Data protection
• Information handling

• Build a culture of responsible innovation.

• Conduct executive awareness sessions and governance workshops.

• Develop reporting dashboards and governance KPIs.

Required Skills to be successful

Education

• Bachelor's Degree in Computer Science, Information Systems, Data Science, Cybersecurity, Law, or related field.

• Master's Degree preferred.

Experience

• 10+ years of experience in data governance, privacy, risk, information management, or technology governance.

• Minimum 5 years leading enterprise governance initiatives.

• Experience within insurance, financial services, banking, or regulated industries preferred.

• Practical experience governing:

• AI/ML platforms
• Generative AI
• Cloud platforms
• Enterprise data environments

About Orient Insurance PJSC

Orient Insurance Company commenced operations in 1982 as a part of the reputed Al-Futtaim Group and has since recorded a progressively steady growth. The Company is counted among the leaders in the UAE insurance market. Orient Insurance Company has a paid-up capital of AED 500 Million which is the highest in the insurance industry in UAE. With head office in Dubai, the company serves its clientele through an extensive branch network in Jebel Ali, Abu Dhabi, Al Ain, Sharjah and Ras Al Khaimah in UAE, Muscat in Sultanate of Oman, Riyadh in Kingdom of Saudi Arabia and Bahrain.