Group DPO and Security Compliance Officer

You will serve as the Data Protection Officer for the Irish and UAE entities and deliver data-protection services across the group. You will manage GDPR and UAE data-protection compliance, data-subject requests, training, and policies. You will lead ISO 27001 and SOC 2 certification work, maintain DORA compliance, write security policies, support enterprise security reviews, maintain the Trust Page, and represent the security and compliance programme to regulators, auditors, and clients.

Responsibilities

• Own group GDPR and UAE data-protection compliance
• Act as DPO for the Irish and UAE entities
• Respond to data-subject requests and conduct data-protection training
• Review and update group-wide data-protection policies and procedures
• Manage ISO 27001 and SOC 2 controls, evidence collection, audit preparation, external auditors, and recertification
• Handle enterprise security questionnaires, due-diligence calls, and security reviews
• Support sales on certification-dependent deals
• Maintain and improve DORA compliance
• Evaluate applicable security and operational-resilience frameworks and regulations
• Review contractual data-protection clauses
• Author, maintain, and version group information-security policies, standards, and procedures
• Build and maintain the public Trust Page
• Lead compliance discussions with regulators, auditors, and clients

Requirements

• Experience as a DPO in the EU
• Willingness to learn UAE data-protection law
• 6+ years of security governance, risk, and compliance experience in a regulated fintech, payments, or technology environment
• Experience personally taking an organisation through ISO 27001 and/or SOC 2
• Experience writing data-protection and security policies and procedures and mapping controls across multiple frameworks
• Ability to communicate credibly with regulators, enterprise clients, and security teams
• Understanding of modern security fundamentals in a cloud-native company
• Fluent written and spoken English