Data Security & Privacy Consultant

Alchemy Global is seeking a qualified Data Security & Privacy Consultant to support a major data management, governance, and protection initiative in Saudi Arabia. The successful candidate will support the development and implementation of data security and privacy frameworks, ensuring that organizational data is appropriately classified, protected, and managed in accordance with applicable regulatory requirements and industry best practices. The role requires expertise in information security, data protection, privacy management, and risk assessment within complex organizational environments. Key Responsibilities • Develop and implement data security, privacy, and protection policies, procedures, and controls. • Conduct privacy impact assessments (PIAs/DPIAs), security risk assessments, and data protection reviews. • Establish data classification frameworks and appropriate controls for sensitive, confidential, and personal information. • Support the implementation of data discovery, classification, and privacy management solutions. • Assess and recommend data protection measures, including encryption, access controls, data masking, and data loss prevention. • Develop and maintain processes for managing data subject requests, privacy incidents, and data protection risks. • Support secure data sharing and integration across internal systems and external stakeholders. • Monitor compliance with relevant privacy and security policies and recommend corrective actions. • Collaborate with governance, IT, cybersecurity, and business teams to ensure consistent application of data protection requirements. • Prepare compliance reports, risk assessments, and supporting documentation. • Deliver workshops and knowledge-transfer sessions on data security and privacy practices. Required Qualifications • Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a closely related field. • Minimum 7 years of relevant professional experience in data security, information security, data privacy, or related disciplines. • At least one of the following certifications: • Certified Information Privacy Professional (CIPP) • Certified Information Systems Security Professional (CISSP) • Demonstrated experience developing and implementing data protection and information security controls. • Strong knowledge of privacy management, data classification, risk assessment, and information security frameworks. • Experience supporting security and privacy compliance initiatives. • Strong analytical, problem-solving, communication, and documentation skills. Preferred Qualifications • Experience working on data security or privacy initiatives within government or public-sector organizations. • Knowledge of ISO/IEC 27001, ISO/IEC 27701, and related information security and privacy standards. • Experience implementing data discovery, classification, data loss prevention, or privacy management platforms.

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a closely related field. Minimum 7 years of relevant professional experience in data security, information security, data privacy, or related disciplines. At least one of the following certifications: Certified Information Privacy Professional (CIPP) or Certified Information Systems Security Professional (CISSP). Demonstrated experience developing and implementing data protection and information security controls. Strong knowledge of privacy management, data classification, risk assessment, and information security frameworks. Experience supporting security and privacy compliance initiatives. Strong analytical, problem-solving, communication, and documentation skills.

Develop and implement data security, privacy, and protection policies, procedures, and controls. Conduct privacy impact assessments (PIAs/DPIAs), security risk assessments, and data protection reviews. Establish data classification frameworks and appropriate controls for sensitive, confidential, and personal information. Support the implementation of data discovery, classification, and privacy management solutions. Assess and recommend data protection measures, including encryption, access controls, data masking, and data loss prevention. Develop and maintain processes for managing data subject requests, privacy incidents, and data protection risks. Support secure data sharing and integration across internal systems and external stakeholders. Monitor compliance with relevant privacy and security policies and recommend corrective actions. Collaborate with governance, IT, cybersecurity, and business teams to ensure consistent application of data protection requirements. Prepare compliance reports, risk assessments, and supporting documentation. Deliver workshops and knowledge-transfer sessions on data security and privacy practices.