We're Hiring: Senior Privacy Counsel Location: United Arab Emirates (Remote) Employment Type: Full-Time Experience Level: Senior Work Arrangement: Fully Remote About Us We are a globally focused organization committed to responsible business practices, trusted data management, regulatory compliance, and sustainable growth across diverse markets. Our Legal, Privacy, Compliance, Technology, Security, Product, Human Resources, Marketing, Commercial, and Operations teams work collaboratively to protect personal information, manage privacy risk, enable responsible data use, and support innovative products and services. The Role We are seeking an experienced Senior Privacy Counsel to provide strategic legal advice on privacy, data protection, information governance, and responsible use of personal information across the organization. The ideal candidate will advise senior leadership and cross-functional teams on complex privacy matters, develop and maintain privacy frameworks, support product and technology initiatives, assess data-processing risks, manage regulatory requirements, and help embed privacy-by-design principles throughout business operations. Key Responsibilities * Provide strategic and practical legal advice on privacy, data protection, and personal-information matters. * Lead the organization's privacy legal strategy across relevant jurisdictions and business activities. * Monitor and interpret applicable privacy and data-protection laws, regulations, regulatory guidance, and enforcement developments. * Assess the legal and regulatory impact of new privacy requirements on business operations, products, services, and technology. * Advise business teams on the collection, use, storage, sharing, retention, transfer, and deletion of personal information. * Advise on privacy implications of new products, services, technologies, business models, and operational processes. * Embed privacy-by-design and privacy-by-default principles into product and service development. * Review product requirements, technical designs, data flows, and business processes from a privacy perspective. * Conduct or oversee privacy impact assessments and data protection impact assessments. * Identify privacy risks and recommend proportionate legal, contractual, technical, and organizational controls. * Advise on lawful bases for processing personal information and appropriate processing conditions. * Provide guidance on consent requirements, notices, transparency obligations, and individual rights. * Review and advise on privacy notices, consent language, cookie notices, disclosures, and customer communications. * Advise on data-subject or individual rights requests, including access, correction, deletion, objection, restriction, portability, and related rights where applicable. * Establish legal requirements and response frameworks for privacy rights requests. * Support the development and maintenance of privacy policies, standards, procedures, and internal guidance. * Review internal data-governance frameworks and recommend improvements. * Advise on data retention, deletion, minimization, purpose limitation, and information lifecycle requirements. * Review data inventories, records of processing activities, data maps, and privacy documentation. * Advise on cross-border transfers and international data-sharing arrangements. * Assess appropriate safeguards for international transfers of personal information. * Review contractual mechanisms supporting international data transfers and related privacy obligations. * Draft, review, and negotiate data-processing agreements, data-sharing agreements, privacy clauses, and related contractual provisions. * Advise Procurement and Commercial teams on privacy requirements within vendor and customer contracts. * Review third-party data-processing arrangements and identify privacy risks associated with suppliers, processors, service providers, and technology partners. * Support privacy due diligence for new vendors, strategic partnerships, acquisitions, investments, and corporate transactions. * Advise on data processing by cloud providers, analytics platforms, artificial intelligence systems, advertising platforms, and other technology providers. * Review privacy implications of artificial intelligence, machine learning, automated decision-making, profiling, and emerging technologies. * Develop legal guidance for responsible use of AI involving personal or sensitive information. * Advise on employee privacy, workforce monitoring, HR data, recruitment data, background screening, and workplace technologies. * Support Marketing and Communications teams on direct marketing, behavioral advertising, cookies, tracking technologies, and customer-data use. * Advise Product and Technology teams on analytics, personalization, identity management, location data, biometrics, and other privacy-sensitive technologies. * Advise Information Security teams on privacy requirements related to cybersecurity, access controls, monitoring, and information protection. * Support the legal response to personal-data breaches and privacy incidents. * Advise on breach notification obligations, regulatory reporting, affected-individual communications, and remediation requirements. * Participate in incident-response teams and provide timely legal guidance during privacy and security incidents. * Review incident investigations and recommend corrective and preventive measures. * Advise on sensitive categories of personal information and enhanced safeguards where required. * Support the organization's privacy governance and oversight committees. * Develop privacy governance structures, decision-making processes, escalation procedures, and accountability frameworks. * Define roles and responsibilities between Legal, Privacy, Security, Compliance, Technology, Product, and business teams. * Develop privacy risk registers and monitor significant privacy-related risks. * Provide guidance to senior management on material privacy risks and regulatory developments. * Support regulatory inquiries, investigations, audits, inspections, and information requests involving privacy matters. * Coordinate with regulators and external advisers where appropriate. * Prepare responses to regulatory correspondence and privacy-related legal inquiries. * Manage external privacy counsel, legal advisers, consultants, and specialist providers. * Define external adviser scopes, deliverables, budgets, and performance expectations. * Develop privacy training and awareness programs in partnership with Compliance, HR, and business stakeholders. * Deliver targeted legal guidance and training to teams handling significant amounts of personal information. * Promote privacy awareness and responsible data-handling practices throughout the organization. Key Performance Indicators * Privacy legal advisory response time * Privacy matter resolution time * Privacy impact assessment completion * Data protection impact assessment completion * Privacy review completion for new products and projects * Privacy-by-design adoption * Privacy risk identification rate * Privacy risk remediation rate * Data-processing agreement completion * Third-party privacy due-diligence completion * High-risk vendor review completion * Cross-border transfer assessment completion * International data-transfer compliance * Privacy notice review completion * Consent-management compliance * Data-subject rights response timeliness * Data-subject rights compliance rate * Privacy incident response time * Privacy breach notification timeliness * Privacy incident remediation rate * Repeat privacy incident rate * Privacy regulatory inquiry response time * Regulatory finding remediation * Privacy audit completion * Audit issue closure rate * Privacy policy review completion * Privacy policy compliance * Data-retention compliance * Data-minimization compliance * Records-of-processing accuracy * Data inventory completeness * Privacy risk-register accuracy * Privacy training completion * High-risk employee training coverage * Privacy awareness assessment results * Contractual privacy compliance * Third-party privacy control effectiveness * AI privacy assessment completion * Emerging-technology privacy review completion * Privacy governance meeting completion * Privacy issue escalation timeliness * Legal advice quality * Stakeholder satisfaction * External counsel performance * Privacy compliance maturity * Overall reduction in material privacy exposure Ideal Candidate The successful candidate should have strong experience in privacy law, data protection, technology law, information governance, regulatory compliance, or legal advisory roles involving personal information, preferably within a multinational, technology, financial, professional-services, consumer, healthcare, e-commerce, or data-intensive organization. The candidate should demonstrate: * Strong knowledge of privacy and data-protection laws and regulatory principles. * Experience advising businesses on complex privacy and data-protection matters. * Strong understanding of privacy governance and accountability frameworks. * Experience conducting or overseeing privacy impact assessments and data protection impact assessments. * Strong understanding of data lifecycle management, data minimization, retention, transparency, and individual rights. * Experience advising on cross-border data transfers and international data-sharing arrangements.