Location: Riyadh, Saudi Arabia | Practice Area: Data & Analytics | Type: Permanent
At Capco, we are looking for an experienced Data Privacy & Security – Senior Manager to support enterprise-wide data privacy, protection and security transformation programmes for our financial services clients in Saudi Arabia. You will play a key role in designing, implementing and operationalising data privacy and protection capabilities aligned with Saudi Arabia's Personal Data Protection Law (PDPL), National Cybersecurity Authority (NCA) frameworks and applicable regulatory requirements. Working closely with Data Privacy, Compliance, Information Security, IT and business stakeholders, you will translate complex regulatory and operational requirements into practical controls, governance frameworks, technology-enabled processes and sustainable operating models. This is an opportunity to lead high-impact advisory and technology transformation engagements, helping financial institutions strengthen their privacy capabilities, manage regulatory obligations and build greater confidence in how they protect and manage data.
What You’ll Do
- Lead privacy and security transformation: Assess enterprise privacy maturity, define data privacy and governance strategies, develop target operating models, capability frameworks and transformation roadmaps aligned with Saudi PDPL, NCA and wider regulatory requirements.
- Deliver privacy technology solutions: Lead the implementation and integration of privacy management platforms such as OneTrust, BigID and Securiti, overseeing data discovery, classification, data mapping, consent management, data subject access requests (DSARs), privacy impact assessments and third-party risk workflows.
- Embed privacy into business operations: Design and operationalise privacy policies, controls, procedures and workflows covering data subject rights, incident management, data lifecycle management and regulatory compliance, while integrating privacy and security requirements into business processes and digital transformation initiatives.
- Drive client engagement and delivery excellence: Collaborate with senior stakeholders, technology teams and platform vendors to manage solution design, integration, testing, user acceptance testing (UAT), deployment and post-go-live stabilisation, while facilitating workshops and translating complex requirements into actionable recommendations.
- Build sustainable privacy capabilities: Advise clients on emerging privacy and security challenges associated with AI, cloud adoption and digital transformation, developing practical playbooks, operating procedures, training materials and knowledge-transfer activities that strengthen long-term organisational capabilities.
What We’re Looking For
- Extensive privacy and security consulting experience: At least 10 years of relevant experience across data privacy, data protection, information security or data governance, including delivery of complex advisory, technology implementation and transformation engagements.
- Strong regulatory and governance expertise: In-depth understanding of Saudi PDPL, NCA frameworks and applicable regional privacy and cybersecurity requirements, with experience translating regulatory obligations into practical governance models, controls and operational processes.
- Privacy technology implementation experience: Experience working with platforms such as OneTrust, BigID, Securiti or equivalent, supported by knowledge of data discovery, classification, consent management, DSARs, privacy assessments and data lifecycle management.
- Client leadership and programme delivery: Experience advising senior stakeholders, managing multidisciplinary teams, overseeing complex engagements and contributing to business development, solution shaping and client proposals.
- Communication and stakeholder engagement: Ability to communicate complex regulatory and technical concepts clearly, build effective client relationships, facilitate workshops and deliver practical recommendations that support measurable business outcomes.
Bonus Points For
- Experience working with financial institutions in Saudi Arabia or the wider GCC region.
- Experience leading end-to-end implementations of enterprise privacy management platforms, including integration, testing and operational adoption.
- Knowledge of Saudi regulatory frameworks, including NCA Essential Cybersecurity Controls (ECC), National Data Management Office (NDMO) standards and Saudi Central Bank (SAMA) requirements.
- Relevant professional certifications such as CIPP/E, CIPM, CISM, CDPSE, CISSP or equivalent.
- Experience supporting business development, shaping consulting proposals and developing long-term client relationships within regulated industries.
Why Join Capco
- Deliver high-impact technology solutions for Tier 1 financial institutions.
- Work in a collaborative, flat, and entrepreneurial consulting culture.
- Access continuous learning, training, and industry certifications.
- Be part of a team shaping the future of digital financial services.
- Help shape the future of digital transformation across FS & Energy.
We offer a competitive, people-first benefits package designed to support every aspect of your life.
Inclusion at Capco
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
