Open to opportunities

Lamia Souissi

@lamiasouissi

Message

Senior Data Privacy & Data Protection Manager delivering compliant, privacy-by-design governance for digital banking.

United Arab Emirates

Message

What I'm looking for

I’m looking to lead enterprise privacy programs—driving PDPL/DIFC/ADGM and GDPR compliance, DPIAs, and privacy-by-design—while partnering with business leaders to strengthen governance, regulatory readiness, and audit outcomes.

I’m a Senior Data Privacy & Data Protection Manager with 10+ years of experience across UAE banking, consulting, and regulatory environments. I specialize in UAE PDPL, DIFC DP Law, ADGM regulations, and GDPR compliance, turning requirements into privacy governance, DPIAs, and privacy-by-design implementation.

In my current role at Ajman Bank, I lead privacy and protection strategy, implement privacy frameworks and risk assessments, and embed a data protection culture through awareness and training. Previously at Abu Dhabi Islamic Bank, I supported multi-jurisdiction compliance, maintained data flow maps and personal data inventories, negotiated third-party privacy clauses, facilitated data subject requests, and monitored regulatory developments—strengthening enterprise privacy readiness. I also bring OneTrust and ISO 27001 leadership credibility to support durable control frameworks and secure digital transformation.

Experience

Work history, roles, and key accomplishments

Current

Senior Data Protection Manager

Current

Ajman Bank

Jun 2025 - Present (1 year)

Led data privacy and protection strategy to support compliance with UAE Central Bank requirements and applicable regulations across digital banking products. Built privacy governance and risk assessment processes, and drove privacy-by-design initiatives through leadership partnership and regulatory audit readiness.

Privacy Governance Privacy By Design DPIAs Digital Banking Privacy Controls Risk Assessment

Data Privacy Manager

Abu Dhabi Islamic Bank (ADIB)

Feb 2023 - May 2025 (2 years 3 months)

Advised business units on data privacy matters and ensured compliance across UAE PDPL, DIFC DP Law, ADGM regulations, and UK GDPR for ADIB and its subsidiaries. Conducted DPIAs for digital banking, third-party engagements, and new technologies, and developed group privacy standards and operating procedures.

UAE PDPL GDPR DPIAs

Head of Compliance & GDPR

Dataprotect

Jan 2018 - Apr 2022 (4 years 3 months)

Implemented governance and compliance systems to support end-customer GDPR and data management requirements. Delivered information security engagements aligned to ISO/IEC 27001 and advised stakeholders on GDPR implementation, compliance monitoring, and data protection impact assessments.

GDPR Compliance DPIAs Data Management ISO 27001 Information Security Advisory Compliance Monitoring

Head Of Internal Audit Department

Creditinfo Maroc

May 2016 - Jan 2018 (1 year 8 months)

Developed audit tools and techniques with top management to strengthen risk management and internal controls. Conducted regular audits of independent departments, evaluated policies and procedures, and produced audit programs and reporting with recommended corrective actions.

Internal Audit Risk Management Internal Controls Audit Planning Audit Reporting Quality Assurance

Privacy & Data Protection Consultant

Consilium Maroc

Dec 2012 - Apr 2016 (3 years 4 months)

Helped organizations manage personal data lawfully by implementing privacy impact assessments, policies, controls, and privacy notices. Performed documentation and process analysis, supported IT audits and personal information management systems, and onboarded/trained junior consultants.

Privacy Impact Assessment Privacy Controls IT Audit Personal Information Systems Documentation Analysis

Data Privacy Engineer

CNDP (Morocco)

Jan 2012 - Nov 2012 (10 months)

Provided guidance on compliance with data protection legislation, including advising on cases where processing may contravene requirements. Drafted internal policy updates and guidance, and supported workshops/training to help organizations interpret and apply data protection rules.

Data Protection Regulatory Interpretation Privacy Guidance Notes Personal Data Processing Assessment Compliance Advisory

Oracle Technico-Functional Consultant

Citelum

Jan 2010 - Dec 2011 (1 year 11 months)

Designed, developed, and implemented Oracle ERP financial modules including GL, AP, AR, FA, and PO. Built custom reports using XML and performed personalization of forms within financial and manufacturing modules.

Oracle ERP G L AR Custom Reports Personalization