Data Privacy & Protection Officer

About the role

The Data Privacy & Protection Officer will lead the organisation's data protection strategy, ensuring compliance with relevant laws and industry standards, especially within the FinTech sector. This full‑time, on‑site position in Lahore involves close collaboration with legal, security, product and engineering teams to embed privacy‑by‑design across all systems.

Key responsibilities

• Develop, implement and maintain privacy policies and procedures aligned with GDPR, PCI‑DSS and other applicable standards.
• Conduct regular privacy impact assessments and monitor ongoing compliance.
• Review data handling workflows, manage incident response for potential breaches, and coordinate audits.
• Provide guidance and training to cross‑functional teams on privacy best practices.

Required profile

• Proven experience in data protection, information security or compliance, preferably in FinTech or financial services.
• Strong knowledge of regional and international data protection regulations (e.g., GDPR, PCI‑DSS).
• Excellent analytical, risk assessment and documentation skills.
• Bachelor’s or master’s degree in Law, Information Security, Computer Science, Compliance or related field; certifications such as CIPP, CIPM or CIPT are a plus.