Data Protection Officer

About the role

The Data Protection Officer (DPO) will ensure GlobeMed Group fully complies with data protection regulations across the MENA region. Reporting directly to the Audit Committee and senior management, the DPO will oversee data handling practices, manage privacy risks, and act as the primary liaison with regulatory authorities.

Key responsibilities

• Monitor and audit all data processing activities to ensure alignment with applicable data protection laws and internal policies.
• Maintain comprehensive documentation, including personal data inventories, data flow maps, and classification registers.
• Track legislative changes and update policies, procedures, and controls accordingly.
• Lead privacy‑by‑design reviews for new products, systems, and services.
• Conduct regular internal and external audits, identify non‑compliance, and recommend corrective actions.
• Prepare periodic compliance reports for senior leadership and the Audit Committee.
• Serve as the main point of contact with data protection authorities and manage communications with external processors and service providers.
• Oversee complaint handling and data subject request processes, ensuring timely and accurate responses.

Required profile

• Proven experience in data protection, privacy compliance, or related legal fields, preferably within the healthcare sector.
• Ability to work independently, without conflicts of interest, and to access senior leadership directly.
• Strong analytical and risk‑assessment skills, with a track record of implementing effective controls.
• Excellent communication skills for liaising with regulators, internal teams, and external partners.

Required skills