Data Protection Officer

Job Title: Group Data Protection Officer (DPO)Location: Bengaluru (Hybrid)Role Type: Full-timeReporting to: General CounselExperience: 8 to 12 yearsAbout the CompanyThe client is a UAE-headquartered fintech and digital asset infrastructure platform that enables traditional banks, fintechs, and enterprises to launch and embed regulated digital asset services through a modular API platform.About the Role The Group Data Protection Officer (DPO) will lead the organization’s data protection and privacy function across all jurisdictions of operations. There is a strong focus on UAE regulatory frameworks including DIFC, ADGM, and UAE mainland laws, as well as Canada, Turkey, USA, EU, Switzerland, Saudia Arabia and other expansion markets. In a fintech environment, this role is critical in ensuring compliant handling of sensitive financial and personal data, while enabling business growth, innovation, and digital product development. The DPO operates independently, advising senior leadership and acting as the primary point of contact for regulators and data subjects.Key Responsibilities Data Protection & Strategy Governance - Embed privacy-by-design and by-default principles across all fintech products and platforms, Establish governance structures across multiple entities (regulated and non-regulated)Regulatory Compliance - Act as the primary liaison with regulators regarding data protection matters, Monitor evolving regional and global data protection regulations and assess business impact.Data Risk Management & Security Compliance - Lead Data Protection Impact Assessments (DPIAs) for fintech products (payments, wallets, lending platforms, etc.), Work closely with InfoSec teams to align with standards such as ISO/IEC 27001Fintech & Product Advisory - Advise Product, Engineering, and Growth teams on compliant data usage (e.g. KYC, AML, transaction monitoring), Support cross-border data transfer mechanismsData Subject Rights & Governance - Oversee handling of Data Subject Access Requests (DSARs), consent management, and data lifecycle policies, Maintain Records of Processing Activities (ROPA) across all entitiesQualificationsDeep understanding of fintech data flows (e.g. payments, KYC, fraud systems)Ability to balance regulatory compliance with business agilityStrong stakeholder management across Legal, Tech, Risk, and Product teamsHigh integrity, independence, and ability to challenge senior stakeholders