Job Description:
The AI, Data Governance & Privacy Officer is responsible for establishing and operating the enterprise-wide governance framework for data, artificial intelligence, privacy, and responsible digital innovation.
The role serves as the second-line governance authority for AI and data, ensuring that the organisation maximises the value of data and AI while maintaining compliance with regulatory requirements, ethical standards, privacy obligations, and enterprise risk management principles.
The officer will lead the development of data governance and AI governance frameworks, oversee privacy compliance programmes, drive trustworthy AI adoption, and act as the organisational subject matter expert on data protection, AI risk management, and information governance.
This role is particularly critical as the organisation expands the use of Agentic AI, Generative AI, advanced analytics, machine learning, intelligent automation, and enterprise data platforms across underwriting, claims, finance, reinsurance, customer service, and corporate operations.
What you will do
1. Enterprise AI Governance
Establish and maintain the enterprise AI Governance Framework.
Define policies, standards, controls, and operating procedures for AI usage.
Create governance models for:
Agentic AI
Intelligent Automation
Chair the AI Governance Committee.
Define AI approval and risk assessment processes.
Ensure AI initiatives align with:
Regulatory requirements
Business objectives
Implement AI lifecycle governance across development, deployment, monitoring, and retirement.
Develop controls for:
2. Data Governance & Information Management
Develop and operate the enterprise data governance framework.
Establish data ownership and stewardship models.
Define enterprise standards for:
Data quality
Data classification
Lead enterprise data cataloguing and inventory programmes.
Implement data governance tooling and controls.
Develop governance measures for structured and unstructured data.
Drive data quality improvement initiatives across business functions.
Establish governance for enterprise data platforms, analytics environments, GenAI platforms, and data lakes.
3. Privacy & Data Protection
Act as Data Protection Officer (where required by regulation).
Lead compliance with:
UAE PDPL
Other applicable regional privacy regulations
Define and maintain enterprise privacy frameworks.
Conduct and oversee:
Data Protection Impact Assessments (DPIAs)
Third-party Privacy Reviews
Establish Privacy by Design practices across business and technology initiatives.
Manage:
Data Subject Rights Requests
4. AI Risk & Model Governance
Define model governance standards.
Establish model risk management processes.
Classify AI systems based on risk and criticality.
Develop controls for:
Model validation
Human-in-the-loop oversight
Maintain an enterprise AI model inventory.
Conduct periodic AI risk assessments.
Ensure regulatory readiness for emerging AI regulations.
5. Regulatory Compliance & Audit
Monitor evolving AI, privacy, and data regulations globally.
Translate regulatory requirements into governance controls.
Coordinate regulatory responses and examinations.
Support Internal Audit, Risk, Compliance, and External Audit activities.
Maintain evidence repositories for governance and compliance activities.
Lead remediation of governance and privacy findings.
6. Vendor, Third-Party & Cloud Governance
Define governance requirements for AI vendors and data processors.
Review:
SaaS contracts
Third-party processing agreements
Assess external AI platforms for privacy, security, compliance, and ethical risk.
Establish governance controls for third-party LLMs and foundation model providers.
7. Governance Awareness & Culture
Develop enterprise-wide training programmes on:
Responsible AI
Information handling
Build a culture of responsible innovation.
Conduct executive awareness sessions and governance workshops.
Develop reporting dashboards and governance KPIs.
Skills
Required Skills to be successful
Education
Bachelor's Degree in Computer Science, Information Systems, Data Science, Cybersecurity, Law, or related field.
Master's Degree preferred.
Experience
10+ years of experience in data governance, privacy, risk, information management, or technology governance.
Minimum 5 years leading enterprise governance initiatives.
Experience within insurance, financial services, banking, or regulated industries preferred.
Practical experience governing:
AI/ML platforms
About Orient Insurance PJSC
Orient Insurance Company commenced operations in 1982 as a part of the reputed Al-Futtaim Group and has since recorded a progressively steady growth. The Company is counted among the leaders in the UAE insurance market. Orient Insurance Company has a paid-up capital of AED 500 Million which is the highest in the insurance industry in UAE. With head office in Dubai, the company serves its clientele through an extensive branch network in Jebel Ali, Abu Dhabi, Al Ain, Sharjah and Ras Al Khaimah in UAE, Muscat in Sultanate of Oman, Riyadh in Kingdom of Saudi Arabia and Bahrain.
