We are seeking top talent in the AI Engineering and Developer Tech space. At Confidential AI Hiring, we are committed to providing an innovative and dynamic environment. More details will be shared with selected candidates, ensuring a tailored and focused recruitment process.
Role Description
This is a full-time hybrid role for a Legal Counsel – Data Privacy, Cybersecurity & Technology Regulations (UAE / KSA Focus).
The position is based in Cairo, Egypt, with up to 40% travel to Abu Dhabi/Dubai and some work-from-home flexibility. We are looking for an experienced Legal Counsel with specialized knowledge in data privacy, cybersecurity law, AI and emerging technology regulations, and compliance, with a particular focus on the legal and regulatory frameworks in the UAE, Saudi Arabia, and the broader Middle East region. The ideal candidate will provide strategic and practical legal guidance on navigating the complex and evolving legal landscape around digital technologies, ensuring compliance with both local and global standards.
Key Responsibilities
- Advise internal stakeholders on regional and global data protection laws including:
· UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
· Saudi Arabia’s Personal Data Protection Law (PDPL, Royal Decree M/19)
· Relevant sectoral laws and free zone regulations (e.g., DIFC, ADGM Data Protection Regulations)
- Provide counsel on cybersecurity frameworks, including:
· UAE Cybercrimes Law (Federal Decree-Law No. 34 of 2021)
· KSA’s Cybersecurity Framework by the National Cybersecurity Authority (NCA)
· Industry-specific security standards and national digital strategies
- Advise on the regulatory and ethical use of Artificial Intelligence, especially in light of:
· UAE’s AI Ethics Guidelines and National AI Strategy 2031
· Saudi Data and AI Authority (SDAIA) frameworks and National Strategy for Data & AI (NSDAI)
- Draft, review, and negotiate:
· Data processing agreements (DPAs), cloud service agreements, cybersecurity clauses, and data sharing agreements
- Support internal audits, regulatory reviews, and compliance initiatives related to:
· NIST, ISO/IEC 27001, SOC 2, NCA Essential Cybersecurity Controls
- Track regulatory developments in tech law across GCC and international jurisdictions (GDPR, CCPA, EU AI Act), providing internal legal updates and strategic advice.
- Conduct legal risk assessments and collaborate with technical and business teams to ensure secure and compliant digital operations.
- Design and deliver internal training on data privacy, cybersecurity, and responsible technology use.
Qualifications
- Law degree (LLB, JD, or LLM); admitted to practice law in a recognized jurisdiction (MENA, EU, UK, US, or Commonwealth preferred).
- 5–10 years of legal experience in data privacy, technology, or regulatory compliance—ideally with regional exposure to UAE and KSA regulations.
- Strong understanding of Middle East regulatory bodies: UAE Data Office, NCA (KSA), SDAIA, CITC, and free zone regulators.
- Proven experience advising on international frameworks such as GDPR, CCPA, OECD AI Principles, and EU AI Act.
- Skilled in contract negotiation, regulatory interpretation, and policy development.
- Certifications such as CIPP/MENA, CIPP/E, CISSP, or ISO/IEC 27001 Lead Auditor are a plus.
- Fluent in English; Arabic proficiency is a strong advantage.
Why Join Us?
- Influence regulatory and compliance strategy in high-growth digital markets
- Work with innovative cross-border teams in AI, fintech, healthtech, or smart city sectors
- Access to cutting-edge legal work at the intersection of tech and law
- Competitive salary, regional benefits, and growth opportunities