Data Security, Privacy, Governance and Compliance Engineer

About the role

Timesworld is looking for an experienced engineer to strengthen data security, privacy, governance and compliance across its platforms, client projects and internal operations. The role combines hands-on technical implementation with policy development, risk assessment and compliance support. It is a permanent position based in Dubai.

Key responsibilities

• Implement and maintain security controls across databases, applications, cloud environments and data pipelines.
• Establish data classification, access control, encryption, retention and secure disposal practices.
• Conduct security and privacy risk assessments, identify gaps and coordinate corrective actions.
• Embed privacy and security requirements into system design, development and deployment.
• Maintain data inventories, processing records, data flow maps and governance documentation.
• Support compliance with data protection requirements, including UAE PDPL, GDPR and India's DPDPA.
• Support ISO 27001 controls, internal reviews, client assessments and certification audits.
• Monitor security events and vulnerabilities, investigate incidents and coordinate response and remediation.
• Assess third-party security and privacy practices and support reviews of data processing arrangements.
• Work with technical, business and client teams to promote responsible data handling.

Required profile

• Bachelor's degree in information security, computer science, information technology or a related discipline.
• At least 5 years of relevant experience in data security, with demonstrated exposure to privacy, governance and compliance.
• Practical experience with identity and access management, database security, encryption, vulnerability management and security monitoring.
• Working knowledge of data protection principles, ISO 27001 and data governance frameworks.
• Experience implementing controls in cloud and on-premises environments.
• Strong documentation, analytical and communication skills.
• Preferred: certifications such as CISSP, CISM, CISA, CIPT, CIPP/E, CDMP or ISO 27001 Lead Implementer/Auditor; experience supporting enterprise platforms, government projects or environments handling sensitive personal data.