Data Privacy & Security Senior Manager

About the Role

Capco is seeking an experienced Data Privacy & Security Senior Manager to lead enterprise-wide data privacy, protection, and security transformation programs for financial services clients in Riyadh, Saudi Arabia. This permanent position involves designing, implementing, and operationalizing data privacy and protection capabilities in alignment with Saudi Arabia's Personal Data Protection Law (PDPL), National Cybersecurity Authority (NCA) frameworks, and other applicable regulatory requirements. The role requires close collaboration with Data Privacy, Compliance, Information Security, IT, and business stakeholders to translate complex requirements into practical controls and sustainable operating models.

Key Responsibilities

• Lead privacy and security transformation initiatives, including assessing enterprise privacy maturity, defining data privacy and governance strategies, and developing target operating models and transformation roadmaps aligned with Saudi PDPL, NCA, and wider regulatory requirements.
• Deliver privacy technology solutions by leading the implementation and integration of privacy management platforms such as OneTrust, BigID, and Securiti, overseeing data discovery, classification, data mapping, consent management, data subject access requests (DSARs), privacy impact assessments, and third-party risk workflows.
• Embed privacy into business operations by designing and operationalizing privacy policies, controls, procedures, and workflows covering data subject rights, incident management, data lifecycle management, and regulatory compliance, while integrating privacy and security requirements into business processes and digital transformation initiatives.
• Drive client engagement and delivery excellence, collaborating with senior stakeholders, technology teams, and platform vendors to manage solution design, integration, testing, user acceptance testing (UAT), deployment, and post-go-live stabilization. This includes facilitating workshops and translating complex requirements into actionable recommendations.
• Build sustainable privacy capabilities by advising clients on emerging privacy and security challenges related to AI, cloud adoption, and digital transformation, developing practical playbooks, operating procedures, training materials, and knowledge-transfer activities.

Qualifications and Experience

• At least 10 years of relevant experience in data privacy, data protection, information security, or data governance, including the delivery of complex advisory, technology implementation, and transformation engagements.
• In-depth understanding of Saudi PDPL, NCA frameworks, and applicable regional privacy and cybersecurity requirements, with experience translating regulatory obligations into practical governance models, controls, and operational processes.
• Experience working with privacy management platforms such as OneTrust, BigID, Securiti, or equivalent, supported by knowledge of data discovery, classification, consent management, DSARs, privacy assessments, and data lifecycle management.
• Proven experience advising senior stakeholders, managing multidisciplinary teams, overseeing complex engagements, and contributing to business development, solution shaping, and client proposals.
• Ability to communicate complex regulatory and technical concepts clearly, build effective client relationships, facilitate workshops, and deliver practical recommendations that support measurable business outcomes.

Preferred Qualifications

• Experience working with financial institutions in Saudi Arabia or the wider GCC region.
• Experience leading end-to-end implementations of enterprise privacy management platforms, including integration, testing, and operational adoption.
• Knowledge of Saudi regulatory frameworks, including NCA Essential Cybersecurity Controls (ECC), National Data Management Office (NDMO) standards, and Saudi Central Bank (SAMA) requirements.
• Relevant professional certifications such as CIPP/E, CIPM, CISM, CDPSE, CISSP, or equivalent.
• Experience supporting business development, shaping consulting proposals, and developing long-term client relationships within regulated industries.

Work Environment and Culture

Capco offers a collaborative, flat, and entrepreneurial consulting culture. The role provides opportunities for continuous learning, training, and industry certifications, contributing to the future of digital financial services and digital transformation across the Financial Services and Energy sectors. Capco is committed to an inclusive recruitment process and values each person's unique perspective and contribution.