Manager - Cyber Security - Data Privacy and Protection Specialist

As part of our Cyber Technology Consulting team, you will lead and manage data privacy and protection engagements for clients across the MENA region. This role involves close collaboration with cross-functional teams within Advisory services. We are looking for a Manager with deep expertise in data privacy regulations, frameworks, and technologies to join our Cybersecurity practice, helping organizations build trust and ensure compliance while protecting sensitive data in today’s digital and regulatory landscape.

Key Responsibilities:

• Lead privacy and data protection programs, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and data flow mapping exercises.
• Advise clients on regulatory compliance with privacy laws and standards such as GDPR, UAE Federal Decree Law No. 45, DIFC DP Law, ADGM DPL, Saudi PDPL, NDMO, and global cross-border data transfer requirements.
• Design and implement privacy governance frameworks, policies, and operating models aligned with business and legal requirements.
• Provide strategic guidance on Privacy by Design, Data Classification, Data Loss Prevention (DLP), Consent Management, and third-party data risk management.
• Evaluate and implement technology controls and tools to support privacy goals (e.g., encryption, pseudonymization, anonymization).
• Oversee privacy audits, readiness assessments, and regulatory response planning.
• Collaborate with legal, compliance, information security, and data governance teams to align enterprise-wide data protection strategies.
• Design and deliver training sessions for employees on data privacy principles, policies, and best practices.
• Evaluate and manage privacy risks associated with third-party vendors, ensuring compliance with data protection agreements.
• Support breach notification processes and incident response with a privacy lens.
• Stay updated on evolving data privacy regulations and assess their impact on the organization’s practices.
• Manage client relationships and project delivery, ensuring quality assurance and client satisfaction.
• Mentor and coach junior team members to foster their technical and professional development.

Skills and Attributes for Success:

• Deep understanding of data protection regulations and global privacy trends.
• Strong knowledge of privacy risk management and data lifecycle management.
• Familiarity with data protection technologies (e.g., DLP, CASB, encryption).
• Strong project management and communication skills.
• Excellent analytical and problem-solving abilities.

Qualifications:

• A bachelor's or master’s degree in information technology, cyber security, or a related field.
• 6-7 years of experience in the Data Privacy and Protection domain.
• Excellent communication skills and a consulting mindset.
• Industry-recognized certifications such as CIPP/E, CIPP/M, CIPM, or ISO 27701 Lead Implementer/Auditor are preferred.
• A valid passport for travel.

Language Requirements:

• Excellent communication skills in English; additional language skills are a plus.

What We Offer: We offer a competitive compensation package based on performance, along with continuous learning opportunities, transformative leadership, and an inclusive culture.