Location: Riyadh, Saudi Arabia | Practice Area: Data & Analytics | Type: Permanent

At Capco, we are looking for an experienced Data Privacy & Security – Senior Manager to support enterprise-wide data privacy, protection and security transformation programmes for our financial services clients in Saudi Arabia. You will play a key role in designing, implementing and operationalising data privacy and protection capabilities aligned with Saudi Arabia's Personal Data Protection Law (PDPL), National Cybersecurity Authority (NCA) frameworks and applicable regulatory requirements. Working closely with Data Privacy, Compliance, Information Security, IT and business stakeholders, you will translate complex regulatory and operational requirements into practical controls, governance frameworks, technology-enabled processes and sustainable operating models. This is an opportunity to lead high-impact advisory and technology transformation engagements, helping financial institutions strengthen their privacy capabilities, manage regulatory obligations and build greater confidence in how they protect and manage data.

What You’ll Do

Lead privacy and security transformation: Assess enterprise privacy maturity, define data privacy and governance strategies, develop target operating models, capability frameworks and transformation roadmaps aligned with Saudi PDPL, NCA and wider regulatory requirements.
Deliver privacy technology solutions: Lead the implementation and integration of privacy management platforms such as OneTrust, BigID and Securiti, overseeing data discovery, classification, data mapping, consent management, data subject access requests (DSARs), privacy impact assessments and third-party risk workflows.
Embed privacy into business operations: Design and operationalise privacy policies, controls, procedures and workflows covering data subject rights, incident management, data lifecycle management and regulatory compliance, while integrating privacy and security requirements into business processes and digital transformation initiatives.
Drive client engagement and delivery excellence: Collaborate with senior stakeholders, technology teams and platform vendors to manage solution design, integration, testing, user acceptance testing (UAT), deployment and post-go-live stabilisation, while facilitating workshops and translating complex requirements into actionable recommendations.
Build sustainable privacy capabilities: Advise clients on emerging privacy and security challenges associated with AI, cloud adoption and digital transformation, developing practical playbooks, operating procedures, training materials and knowledge-transfer activities that strengthen long-term organisational capabilities.

What We’re Looking For

Extensive privacy and security consulting experience: At least 10 years of relevant experience across data privacy, data protection, information security or data governance, including delivery of complex advisory, technology implementation and transformation engagements.
Strong regulatory and governance expertise: In-depth understanding of Saudi PDPL, NCA frameworks and applicable regional privacy and cybersecurity requirements, with experience translating regulatory obligations into practical governance models, controls and operational processes.
Privacy technology implementation experience: Experience working with platforms such as OneTrust, BigID, Securiti or equivalent, supported by knowledge of data discovery, classification, consent management, DSARs, privacy assessments and data lifecycle management.
Client leadership and programme delivery: Experience advising senior stakeholders, managing multidisciplinary teams, overseeing complex engagements and contributing to business development, solution shaping and client proposals.
Communication and stakeholder engagement: Ability to communicate complex regulatory and technical concepts clearly, build effective client relationships, facilitate workshops and deliver practical recommendations that support measurable business outcomes.