Information Security & Data Privacy Specialist

Advanced Search; Kuwait City; On-site; KWD 22,000 - 32,000; Full time

Job summary

Advanced Search is seeking an Information Security & Data Privacy Specialist to be deployed onsite with a leading financial institution in Kuwait City. The role provides advisory and execution support across information security, data privacy, and data protection in alignment with regulatory expectations.

The ideal candidate has 5–7 years in information security and 3–5 years in data privacy, with deep certifications and hands-on experience in PCI DSS, ISO 27001, GDPR awareness, and central bank

Responsibilities

• Review and segregate information security and data privacy policies in line with CBK and regulatory requirements.
• Perform card discovery scans to identify cardholder data across ~3,500 workstations and servers.
• Support information security risk assessments across 250+ information assets.
• Assist in conducting a CBUAE NESA current-state assessment and remediation action plan.
• Support Information Security Risk Reviews aligned with ISO 27001, PCI DSS, SWIFT CSP.
• Perform Privacy Impact Assessments (PIAs) across ~180 banking applications/systems.
• Perform Privacy by Design assessments per CORF across the same applications.
• Document Records of Processing Activities (RoPA) across 20 divisions and 170 sub-divisions.
• Maintain and update the Bank's Data Privacy system records.
• Prepare weekly/monthly progress reports aligned with the Information Security/Data Privacy plan.

Job description

Information Security & Data Privacy Specialist

Industry Software Development / Backend Engineering

Seeking an Information Security & Data Privacy Specialist to be deployed onsite with a leading financial institution in support of the Bank s Non-Financial Risk function. The role delivers advisory and execution support across information security, data privacy, and data protection in alignment with CBK, CBUAE/DFSA, and international regulatory expectations.

Key Responsibilities:

• Review and segregate information security and data privacy policies in line with CBK and CBUAE/DFSA regulations, producing a policy review report highlighting jurisdictional differences and required amendments.
• Perform card discovery scans to identify cardholder data across approximately 3,500 Workstations and servers.
• Support information security risk assessments across 250+ information assets, per the ISMS Risk Assessment Methodology.
• Assist in conducting a CBUAE NESA current-state assessment and develop the associated remediation action plan.
• Support Information Security Risk Reviews aligned with ISO 27001, PCI DSS, and SWIFT CSP controls.
• Perform Privacy Impact Assessments (PIAs) across approximately 180 banking applications/systems.
• Perform Privacy by Design assessments as per CORF across the same application population.
• Document Records of Processing Activities (RoPA) across 20 divisions and 170 sub-divisions.
• Maintain and update the Bank s Data Privacy system records.
• Prepare weekly/monthly progress reports aligned with the Information Security/Data Privacy plan.

Desired Candidate Profile

• 5 – 7 years of experience in Information Security and 3 – 5 years in Data Privacy.
• ISO 27001 / ISO 27701 Lead Auditor or Lead Implementer certification (Information Security/Data Privacy).
• CIPM / CIPP certification (Privacy).
• CISM / CISA certification (Information Security).
• Working knowledge of PCI DSS, SWIFT CSP, and central bank regulations (CBK / CBUAE / DFSA) relating to information security and data privacy.
• Strong knowledge of the ISO 31000 standard and GDPR / regional data privacy requirements.