Job Description: Data Security & Privacy Engineer

Job Title: Data Security & Privacy Engineer
Experience: 3–11+ Years
Location: Riyadh - Onsite
Employment Type: Full-Time

Job Overview

We are seeking a skilled Data Security & Privacy Engineer with 3–11+ years of experience to design, implement, and manage enterprise data security and privacy solutions. The ideal candidate will have strong expertise in identity and access management, data protection technologies, encryption, security monitoring, and privacy controls across cloud environments. This role will be responsible for ensuring the confidentiality, integrity, and availability of enterprise data while supporting regulatory compliance and security best practices.

Key Responsibilities

• Design and implement data security and privacy controls across enterprise environments.
• Manage identity and access management (IAM) solutions across cloud platforms.
• Implement data protection strategies including encryption, masking, and data loss prevention.
• Configure and manage security monitoring and threat detection solutions.
• Support security assessments, audits, and compliance initiatives.
• Define and enforce data security policies, standards, and best practices.
• Collaborate with cloud, infrastructure, application, and data teams to secure enterprise data assets.
• Monitor security events, investigate incidents, and support remediation activities.
• Implement secure data handling practices throughout the data lifecycle.
• Support privacy initiatives including sensitive data discovery, classification, and protection.
• Continuously evaluate emerging security threats and recommend improvements.

Required Technical Skills

Identity & Access Management (IAM)

• Hands-on experience with GCP IAM or Azure IAM or AWS IAM.
• Strong understanding of identity governance, authentication, authorization, roles, permissions, and access controls.
• Experience implementing least privilege access models and access management best practices.

Data Protection & Privacy

• Experience with Data Loss Prevention (DLP) solutions.
• Strong understanding of data classification, sensitive data protection, and privacy controls.
• Experience implementing data security policies and compliance requirements.

Encryption & Key Management

• Strong experience with Encryption and Key Management Services (KMS).
• Knowledge of encryption standards, key lifecycle management, certificate management, and cryptographic best practices.
• Experience securing data at rest, in transit, and during processing.

Data Masking & Protection

• Experience implementing Data Masking techniques for protecting sensitive information.
• Understanding of tokenization, anonymization, and privacy-enhancing technologies.

Security Monitoring & SIEM

• Hands-on experience with Splunk or Microsoft Sentinel for security monitoring and incident detection.
• Experience analyzing security events, alerts, logs, and threat intelligence data.
• Knowledge of SIEM use cases, dashboards, and security investigations.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3–11+ years of experience in Data Security, Cloud Security, Information Security, or Privacy Engineering.
• Strong understanding of cloud security principles and enterprise security architecture.
• Excellent analytical, troubleshooting, and communication skills.
• Experience working with cross-functional security and technology teams.

Preferred Skills

• Experience with cloud security frameworks and compliance standards.
• Knowledge of privacy regulations and data protection requirements.
• Familiarity with security automation and incident response processes.
• Experience securing data platforms, analytics environments, and cloud-native applications.
• Security certifications such as CISSP, CCSP, Security+, or cloud security certifications are a plus.

Key Technology Stack

• Cloud IAM: GCP IAM or Azure IAM or AWS IAM
• Data Protection: DLP and Data Classification and Privacy Controls
• Encryption & Security: Encryption and KMS and Key Lifecycle Management
• Data Privacy: Data Masking and Tokenization and Sensitive Data Protection
• Security Monitoring: Splunk or Microsoft Sentinel
• Security Operations: SIEM Monitoring and Threat Detection and Incident Response
• Cloud Security: Cloud Security Controls and Access Governance and Compliance Management