Engineer - Data Security Privacy Governance And Compliance

Timesworld; Dubai; On-site; AED 420,000 - 720,000; Full time

Job summary

Timesworld in Dubai seeks a Senior Data Security Specialist to implement and maintain security controls across databases, applications, cloud environments, and data pipelines. The role emphasizes privacy, governance and compliance within UAE PDPL, GDPR, and DPDPA contexts.

You will lead risk assessments, embed security in system design, maintain data inventories and support ISO 27001 controls and audits. Strong documentation and communication skills are essential.

Qualifications

• Minimum 5 years of data security experience including privacy, governance and compliance.
• Experience with IAM, database security, encryption, vulnerability management and monitoring.
• Knowledge of data protection principles, ISO 27001 and governance frameworks.
• Experience implementing controls in cloud and on-premises environments.
• Strong documentation, analytical and communication skills.

Responsibilities

• Implement and maintain security controls across databases, applications, cloud environments and data pipelines.
• Establish data classification, access control, encryption, retention and secure disposal practices.
• Conduct security and privacy risk assessments, identify gaps and coordinate corrective actions.
• Embed privacy and security requirements into system design, development and deployment.
• Maintain data inventories, processing records, data flow maps and governance documentation.
• Support compliance with UAE PDPL, GDPR and India's DPDPA.
• Support ISO 27001 controls, internal reviews, client assessments and certification audits.
• Monitor security events and vulnerabilities, investigate incidents and coordinate response and remediation.
• Assess third-party security and privacy practices and support reviews of data processing arrangements.
• Work with technical, business and client teams to promote responsible data handling.

Skills

Identity & Access

Database Security

Encryption

Vulnerability Management

Security Monitoring

Analytical Skills

Communication

Education

Bachelor's degree in IT/Security

Job description

Job Description:

Job ID: PRJ-DXB-2265

Department: Projects

Job Type: Permanent

Location: Dubai

Job Details

• Implement and maintain security controls across databases, applications, cloud environments and data pipelines.
• Establish data classification, access control, encryption, retention and secure disposal practices.
• Conduct security and privacy risk assessments, identify gaps and coordinate corrective actions.
• Embed privacy and security requirements into system design, development and deployment.
• Maintain data inventories, processing records, data flow maps and governance documentation.
• Support compliance with applicable data protection requirements, including UAE PDPL, GDPR and India's DPDPA.
• Support ISO 27001 controls, internal reviews, client assessments and certification audits.
• Monitor security events and vulnerabilities, investigate incidents and coordinate response and remediation.
• Assess third-party security and privacy practices and support reviews of data processing arrangements.
• Work with technical, business and client teams to promote responsible data handling.

Requirements (Qualifications/Experience/Competencies)

• Bachelor's degree in information security, computer science, information technology or a related discipline.
• At least 5 years of relevant experience in data security, with demonstrated exposure to privacy, governance and compliance.
• Practical experience with identity and access management, database security, encryption, vulnerability management and security monitoring.
• Working knowledge of data protection principles, ISO 27001 and data governance frameworks.
• Experience implementing controls in cloud and on-premises environments.
• Strong documentation, analytical and communication skills.

Preferred

• Relevant certifications such as CISSP, CISM, CISA, CIPT, CIPP/E, CDMP or ISO 27001 Lead Implementer/Auditor.
• Experience supporting enterprise platforms, government projects or environments handling sensitive personal data.