Head of Data Privacy & Protection
Posted Updated 2
views
Envision Employment Solutions is currently looking for a Head of Data Privacy & Protection for one of our partners, a leading Digital Bank!
THE ROLE
There's no privacy program to inherit here, no policy manual to update. You design it, from the framework and classification standards down to how a single customer's data-subject request gets resolved. You act as the bank's DPO and its subject matter expert on privacy, and you're the one who makes sure innovation never outruns what the law, the regulator, or a customer's trust actually allows.
WHAT YOU’LL DO
- Design and implement a comprehensive Data Privacy Framework, privacy policies, and data classification standards completely from scratch
- Direct all compliance initiatives mapped to applicable laws, regulations, and standards, coordinating closely with regulatory authorities and acting as the primary subject matter expert on privacy mandates, serving as Data Protection Officer (DPO)
- Institute and manage the Privacy Impact Assessment (PIA) lifecycle, embedding privacy-by-design and privacy-by-default principles directly into agile product development, analytics pipelines, and new feature launches
- Build scalable workflows to manage Data Subject Access Requests (DSARs), consent management, opt-out mechanisms, and data rectification inquiries
- Drive the implementation and integration of core data protection technologies, including Data Loss Prevention (DLP), Database Activity Monitoring (DAM), encryption key management, and data masking tools, to secure sensitive financial data across cloud and hybrid environments
- Architect and scale enterprise-wide data discovery, tagging, and automated classification programs to ensure continuous visibility and contextual tracking of sensitive customer PII and banking assets
- Oversee cross-border data transfer mechanisms, cloud data residency requirements, and contractual data processing agreements (DPAs) in coordination with legal and infosec teams
- Collaborate with the CISO and Incident Response teams to manage privacy-related security incidents, regulatory breach notifications, and data leakage remediations
WHAT WE’RE LOOKING FOR
- 10+ years of cumulative professional experience, including 4 to 5 years in a dedicated data privacy, data protection, or regulatory compliance leadership role within banking, financial services, or privacy-mature tech sectors
- Deep familiarity with CBE regulations, applicable laws, and general cross-border privacy frameworks such as GDPR
- Strong understanding of data classification tools (e.g., Microsoft Purview), data masking, encryption standards, and secure data storage architectures
- Recognized privacy credentials such as CDPO, CISM, or CISA are strongly preferred
- A proactive, builder mindset, able to balance rigorous legal and privacy controls with the fast-paced, data-driven innovation needs of a modern digital bank
- Outstanding stakeholder management skills, with the ability to translate complex legal and regulatory requirements into clear, actionable guidance for engineering, product, and executive teams
YOU’LL THRIVE HERE IF YOU
- You'd rather design the framework than inherit a policy nobody's updated in years
- You treat a DSAR or consent request as a promise to the customer, not paperwork to process
- You can turn a dense regulatory requirement into something an engineer can actually build against
- You see privacy-by-design as a discipline embedded from day one, not a review bolted on before launch
- You want to build the function that keeps innovation and trust moving at the same speed
Skills
As published by workable · 21 questions · 13 written answers
Basics
First name, Last name, Email, Headline, Phone, Address, Photo, Education, Experience, Summary, Resume, Cover letter
Pick from a list (8)
- How did you hear about us?
- Are you currently based in Egypt? If not, are you willing to relocate to Egypt for this role?
- This is a full-time, on-site role (9 AM to 6 PM). Are you comfortable and available to work on-site during these hours?
- Do you have 10+ years of cumulative professional experience, including 4 to 5 years in a dedicated data privacy, data protection, or regulatory compliance leadership role?
- Has this experience been within banking, financial services, or a privacy-mature tech sector?
- Do you have deep familiarity with CBE regulations and cross-border privacy frameworks such as GDPR?
- Have you previously served as, or performed the functions of, a Data Protection Officer (DPO)?
- Do you hold a certification such as CDPO, CISM, or CISA?
Written answers (13)
- If you were referred to this role by a recruiter, please provide their name.
- How would you rate your English proficiency (written and spoken)?
- Describe your experience designing a Data Privacy Framework or privacy program from scratch. What was the scope and how did you prioritize what to build first?
- Walk us through your experience acting as a DPO or the primary privacy subject matter expert. How did you engage with regulators?
- Tell us about a Privacy Impact Assessment (PIA) process you built or ran. How did you embed privacy-by-design into product development?
- Describe how you've built workflows for Data Subject Access Requests (DSARs) or consent management. What made the process scalable?
- Tell us about your experience implementing data protection technologies (DLP, DAM, encryption key management, or data masking). What tools did you work with?
- Walk us through your experience with enterprise data discovery and classification programs. How did you ensure ongoing visibility over sensitive data?
- Describe your experience managing cross-border data transfers or data processing agreements (DPAs). What frameworks did you rely on?
- Tell us about a privacy-related security incident or breach notification you were involved in. What was your role alongside the CISO or Incident Response team?
- What is your current monthly net salary?
- What are your expected monthly net salary requirements?
- When can you start? (Notice Period)