Data Privacy & Security – Senior Manager

Role overview

What you’ll do

• Assess enterprise privacy maturity and define privacy and governance strategies.
• Develop target operating models, capability frameworks, and transformation roadmaps aligned with regulatory requirements.
• Lead privacy platform implementation and integration, covering discovery, classification, data mapping, consent, DSARs, privacy assessments, and third-party risk workflows.
• Design and operationalise policies, controls, procedures, and workflows for data rights, incidents, data lifecycle, and compliance.
• Embed privacy and security requirements in business processes and digital transformation initiatives.
• Oversee solution design, integration, testing, UAT, deployment, and post-go-live stabilisation.
• Facilitate workshops and turn complex requirements into actionable recommendations.
• Advise on privacy and security challenges involving AI, cloud adoption, and digital transformation.
• Create playbooks, procedures, training materials, and knowledge-transfer activities to strengthen client capabilities.

What we’re looking for

• At least 10 years of relevant experience in data privacy, data protection, information security, or data governance.
• Experience delivering complex advisory, technology implementation, and transformation engagements.
• In-depth understanding of Saudi PDPL, NCA frameworks, and regional privacy and cybersecurity requirements.
• Experience translating regulatory obligations into governance models, controls, and operational processes.
• Experience with OneTrust, BigID, Securiti, or equivalent privacy platforms and related privacy capabilities.
• Experience advising senior stakeholders, managing multidisciplinary teams, and overseeing complex engagements.
• Experience contributing to business development, solution shaping, and client proposals.
• Strong communication, client relationship, workshop facilitation, and recommendation delivery skills.

Bonus qualifications

• Financial institution experience in Saudi Arabia or the wider GCC region is a bonus.
• End-to-end enterprise privacy platform implementation experience is a bonus.
• Knowledge of NCA ECC, NDMO standards, or SAMA requirements is a bonus.
• CIPP/E, CIPM, CISM, CDPSE, CISSP, or equivalent certifications are a bonus.

Why join Capco

• The role offers work on technology solutions for major financial institutions and a collaborative consulting culture.
• The employer describes access to continuous learning, training, and industry certifications.
• The employer offers a benefits package and says it supports digital transformation across financial services and energy.