Engineer - Data Security, Privacy, Governance and Compliance

Role overview

Key responsibilities

• Implement and maintain controls across databases, applications, cloud environments and data pipelines.
• Establish data classification, access control, encryption, retention and secure disposal practices.
• Assess security and privacy risks, identify gaps, and coordinate corrective actions.
• Embed privacy and security requirements into system design, development and deployment.
• Maintain data inventories, processing records, data flow maps and governance documentation.
• Support compliance with UAE PDPL, GDPR and India's DPDPA, and support ISO 27001 controls, reviews, assessments and audits.
• Monitor events and vulnerabilities, investigate incidents, and coordinate response and remediation.
• Assess third-party security and privacy practices and support data processing arrangement reviews.
• Work with technical, business and client teams to promote responsible data handling.

Required qualifications and experience

• Bachelor's degree in information security, computer science, information technology or a related discipline.
• At least 5 years of relevant data security experience, with exposure to privacy, governance and compliance.
• Practical experience with identity and access management, database security, encryption, vulnerability management and security monitoring.
• Working knowledge of data protection principles, ISO 27001 and data governance frameworks.
• Experience implementing controls in cloud and on-premises environments.
• Strong documentation, analytical and communication skills.

Preferred qualifications

• Relevant certifications such as CISSP, CISM, CISA, CIPT, CIPP/E, CDMP or ISO 27001 Lead Implementer/Auditor.
• Experience supporting enterprise platforms, government projects or environments handling sensitive personal data.