Data Privacy & Security Engineer
Socium - Teams Done Differently
Role:Location: United Arab Emirates (UAE) – Full Onsite
Contract Duration: 12 Months
Work Setup: Full Onsite at the Client's Office
Experience Required: Minimum 10 Years of Relevant Experience
Industry Focus: Data Privacy, Data Security, Information Protection & Cybersecurity
Key Responsibilities
Design, implement, manage, and enhance enterprise data privacy, data protection, and information security controls across business systems, applications, databases, and cloud environments.
Implement and maintain Data Loss Prevention (DLP), Data Classification, Data Encryption, Data Masking, Tokenization, and Sensitive Data Protection Solutions.
Conduct data security assessments to identify vulnerabilities, privacy risks, unauthorized data exposure, and potential data leakage.
Develop and implement Data Privacy and Security Controls to protect sensitive, confidential, personal, and business-critical information.
Support compliance with applicable data privacy regulations and security frameworks, including UAE Personal Data Protection Law (PDPL), GDPR, ISO 27001, ISO 27701, and NIST.
Configure, manage, and optimize enterprise data protection technologies such as Microsoft Purview, Microsoft Information Protection, Microsoft Defender, Symantec DLP, and Forcepoint DLP, where applicable.
Implement data classification policies, information protection labels, retention policies, and secure data handling procedures.
Conduct Data Privacy Impact Assessments (DPIA), Data Security Risk Assessments, and Privacy Control Reviews to identify and mitigate data protection risks.
Support the implementation of Privacy-by-Design and Security-by-Design principles across applications, systems, and technology initiatives.
Assess and strengthen data security controls across Cloud Platforms, Microsoft 365, Azure, AWS, Enterprise Applications, and On-Premise Infrastructure.
Collaborate with cybersecurity, IT infrastructure, cloud engineering, application development, compliance, legal, and data governance teams.
Support data security incident investigations, data leakage prevention, security monitoring, and remediation activities.
Implement and review Identity & Access Management (IAM), Role-Based Access Control (RBAC), and Data Access Security Controls to prevent unauthorized access.
Develop technical documentation, data security policies, privacy control procedures, assessment reports, and remediation recommendations.
Monitor emerging data security threats, privacy risks, and regulatory developments, recommending improvements to enterprise data protection controls.
Experience & Professional Qualifications
Minimum 10 years of relevant professional experience in Data Security Engineering, Data Privacy, Information Security, Data Protection, or related cybersecurity disciplines.
Strong hands-on experience implementing and managing Data Loss Prevention (DLP), Data Classification, Information Protection, and Enterprise Data Security Solutions.
Practical experience with Data Encryption, Data Masking, Tokenization, Sensitive Data Discovery, Data Access Controls, and Data Leakage Prevention.
Experience working with enterprise data protection platforms such as Microsoft Purview, Microsoft Information Protection, Microsoft Defender, Symantec DLP, Forcepoint DLP, or equivalent technologies.
Good understanding of UAE PDPL, GDPR, Data Privacy Regulations, Data Protection Principles, and Information Security Compliance Requirements.
Strong knowledge of ISO 27001, ISO 27701, NIST Cybersecurity Framework, and NIST Privacy Framework.
Experience conducting Data Privacy Impact Assessments (DPIA), Security Risk Assessments, Data Protection Reviews, and Privacy Compliance Assessments.
Hands-on experience securing sensitive data across Cloud Environments, Enterprise Applications, Databases, Microsoft 365, Azure, AWS, and On-Premise Infrastructure.
Strong understanding of Data Governance, Data Classification, Data Lifecycle Management, Data Retention, and Secure Data Handling Practices.
Experience implementing Privacy-by-Design, Security-by-Design, Data Access Management, IAM, and RBAC Controls.
Ability to investigate data security incidents, identify data leakage risks, and recommend appropriate technical remediation measures.
Experience integrating data protection controls with enterprise cybersecurity monitoring, incident response, and compliance processes.
Strong stakeholder management skills, with the ability to collaborate across cybersecurity, infrastructure, data governance, compliance, legal, and business teams.
Strong analytical, problem-solving, technical documentation, communication, and organizational skills.
Experience within Banking, Financial Services, Telecommunications, Government, Consulting, or Large Enterprise Environments is advantageous.
Relevant certifications such as CISSP, CISM, CIPP/E, CIPM, CDPSE, ISO 27001, or ISO 27701 are advantageous.