Manager - Cyber Security - Data Privacy and Protection Specialist

Ernst & Young AE; Abu Dhabi; On-site; AED 120,000 - 160,000; Full time

Job summary

A leading company in the UAE is seeking a Manager - Cyber Security specializing in Data Privacy and Protection. The role involves leading privacy programs, advising on compliance with regulations, and implementing governance frameworks. Ideal candidates will have extensive experience in data privacy, strong communication skills, and relevant certifications. This is an excellent opportunity to play a pivotal role in shaping data protection strategies within a dynamic environment.

Qualifications

• 6-7 years of experience in Data Privacy and Protection domain.
• Industry-recognized certifications such as CIPP/E, CIPP/M, CIPM, CIPT, CDPSE, or ISO 27701 Lead Implementer/Auditor.
• Excellent communication skills with a consulting mindset.

Responsibilities

• Lead privacy and data protection programs including PIAs and DPIAs.
• Advise clients on regulatory compliance with privacy laws.
• Design and implement privacy governance frameworks.

Skills

Data protection regulations

Privacy risk management

Data lifecycle management

Stakeholder communication

Analytical skills

Problem-solving skills

Project management

Collaboration skills

Education

Bachelor's or Master's degree in Information Technology or Cyber Security

Tools

Securiti

OneTrust

BigID

Job description

Manager - Cyber Security - Data Privacy and Protection Specialist Ernst & Young AE

• Lead privacy and data protection programs including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and data flow mapping exercises.
• Advise clients on regulatory compliance with privacy laws and standards such as GDPR, UAE Federal Decree Law No. 45, DIFC DP Law, ADGM DPL, Saudi PDPL, NDMO, and global cross-border data transfer requirements.
• Design and implement privacy governance frameworks, policies, and operating models aligned to business and legal requirements.
• Provide strategic guidance on Privacy by Design, Data Classification, Data Loss Prevention (DLP), Consent Management, and third-party data risk management.
• Evaluate and implement technology controls and tooling to support privacy goals (e.g., encryption, pseudonymization, anonymization, privacy-enhancing technologies).
• Oversee privacy audits, readiness assessments, and regulatory response planning.
• Collaborate with legal, compliance, information security, and data governance teams to align enterprise-wide data protection strategies.
• Design and deliver training sessions for employees on data privacy principles, policies, and best practices to foster a culture of privacy awareness within the organization.
• Evaluate and manage privacy risks associated with third-party vendors and partners, ensuring compliance with data protection agreements and standards.
• Handson experience in privacy management tools such as Securiti, OneTrust, and BigID etc. to automate data discovery, manage data subject requests (DSRs), and ensure compliance with data privacy regulations.
• Support breach notification processes and incident response with a privacy lens.
• Stay updated on evolving data privacy regulations and industry standards and assess their impact on the organization s data protection practices.
• Manage client relationships, project delivery, resource allocation, and quality assurance.
• Manage engagement delivery, resourcing, quality assurance, and client satisfaction.
• Develop detailed reports, articulate technical findings, and deliver actionable recommendations to both technical teams and executive stakeholders.
• Manage multiple engagements, ensuring timely delivery, quality assurance, and adherence to industry best practices.
• Mentor and coach junior team members, fostering their technical and professional development.

Skills and attributes for success

• Deep understanding of data protection regulations, global privacy trends, and emerging legislative requirements.
• Strong knowledge of privacy risk management, data lifecycle management, and data subject rights management.
• Ability to translate regulatory and legal obligations into actionable controls and policies.
• Familiarity with data protection technologies (e.g., DLP, CASB, encryption, tokenization, data masking).
• Strong project management, stakeholder communication, and report-writing skills.
• Excellent collaboration skills with legal, compliance, data, and technical stakeholders.
• Excellent communication, analytical, and problem-solving skills.
• Collaborating with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments and other documents/templates.
• Ability to interpret complex technical results and present insights to business stakeholders.
• Excellent communication and collaboration skills

To qualify for the role, you must have

• A bachelor's or master s degree in information technology, cyber security etc.
• Excellent communication skills with a consulting mindset.
• 6-7years of experience in Data Privacy and Protection domain
• A valid passport for travel.
• Excellent communication skills with a consulting mindset.

Ideally, you ll also have

• Industry-recognized certifications such as CIPP/E, CIPP/M, CIPM, CIPT, CDPSE, or ISO 27701 Lead Implementer/Auditor.
• Experience working with privacy technology platforms and tools.
• Experience in sector-specific data protection requirements (e.g., healthcare, financial services, government).

Company Industry

• Banking
• Broking

Department / Functional Area

• IT Software

Keywords

• Manager - Cyber Security - Data Privacy And Protection Specialist

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]