Senior Manager, Data Privacy & Security

About the role

Capco is looking for an experienced Data Privacy & Security Senior Manager to support enterprise-wide data privacy, protection and security transformation programmes for its financial services clients in Saudi Arabia. The role leads the design, implementation and operation of privacy and protection capabilities aligned with Saudi Arabia's Personal Data Protection Law (PDPL), National Cybersecurity Authority (NCA) frameworks and other regulatory requirements, working with Data Privacy, Compliance, Information Security, IT and business stakeholders.

Key responsibilities

• Assess enterprise privacy maturity, define privacy and governance strategies, and set up target operating models, capability frameworks and transformation roadmaps aligned with Saudi PDPL, NCA and wider regulations.
• Lead the implementation and integration of privacy management platforms such as OneTrust, BigID and Securiti, covering data discovery, classification, mapping, consent management, DSARs, privacy impact assessments and third-party risk workflows.
• Design and run privacy policies, controls, procedures and workflows for data subject rights, incident management, data lifecycle management and regulatory compliance, integrated into business processes and digital transformation.
• Manage solution design, integration, testing, UAT, deployment and post-go-live stabilisation with technology teams and vendors, and run workshops to turn complex requirements into actionable recommendations.
• Advise clients on emerging privacy and security challenges around AI, cloud adoption and digital transformation, building playbooks, operating procedures, training materials and knowledge-transfer activities.

Required profile

• At least 10 years of relevant experience in data privacy, data protection, information security or data governance, including complex advisory, technology implementation and transformation engagements.
• In-depth understanding of Saudi PDPL, NCA frameworks and regional privacy and cybersecurity requirements, with experience turning them into governance models, controls and processes.
• Experience advising senior stakeholders, managing multidisciplinary teams, overseeing complex engagements and contributing to business development and client proposals.
• Ability to explain complex regulatory and technical concepts clearly and build effective client relationships.

Required skills

• Experience with privacy platforms such as OneTrust, BigID, Securiti or equivalents.
• Bonus points: experience with financial institutions in Saudi Arabia or the GCC, end-to-end platform implementations, knowledge of NCA ECC, NDMO standards and SAMA requirements, and certifications such as CIPP/E, CIPM, CISM, CDPSE or CISSP.