Lead Senior Legal Counsel, Cairo

**We help the world run better** At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed. **This role is based in Cairo, regional scope is Arabian countries** **PURPOSE AND OBJECTIVES** When processing personal data as part of its business operations, SAP must comply with the requirements of the EU's General Data Protection Regulation (GDPR), Egypt's Data Protection Law No. 151 of 2020, UAE's Federal Decree-Law No. 45 of 2021, Saudi Arabia's PDPL (Personal Data Protection Law), and other applicable data protection and privacy laws in the countries where SAP operates. To support the local SAP entities in meeting their data protection and privacy compliance obligations, SAP has established a global network of Data Protection and Privacy professionals. This network consists of local Data Protection Officers (DPOs) and Data Protection and Privacy Coordinators (DPPCs) that report to the management of the SAP entities by which they are hired and to SAP's global Data Protection & Privacy team, reporting to SAP's Group Data Protection Officer. We are looking for an experienced **Lead Senior Legal Counsel** to serve as the local Data Protection Officer (DPO) for Egypt and as Data Protection and Privacy Coordinator (DPPC) for Arabian countries including the UAE and Saudi Arabia, responsible for leading data protection compliance strategy across the assigned country responsibility. **EXPECTATIONS AND TASKS** The role is responsible for ensuring SAP's compliance with Egypt's data protection regulations, GDPR, and data protection laws across assigned Arabian countries. This role involves collaborating closely with the global data protection and privacy team, local business units, senior management, and external regulatory authorities to manage data protection risks and drive data protection and privacy awareness across the organization. Under Law No. 151 of 2020, the local DPO is a legally recognized role that requires formal registration with the regulator. The candidate must meet the following statutory requirements: 1. **Official Registration:** The candidate must be registered (or eligible for immediate registration) in the official **DPO Register** held by the Egyptian Personal Data Protection Center (PDPC). 2. **Legal Capability Demonstration (Mandatory Exam):** 3. To finalize registration with the PDPC, the candidate must successfully demonstrate legal and technical capabilities in data privacy. 4. **Requirement:** The candidate must pass the official **PDPC accreditation examination** (or equivalent authorized evaluation) proving deep knowledge of Egyptian Law No. 151 of 2020, its executive regulations, and international data transfer frameworks. **_Note: Continued employment in this role is contingent upon successfully passing this exam and securing/maintaining active registration with the PDPC_** _._ **Key Responsibilities:** + **Regulatory Compliance & Strategy:** + Ensure compliance with Egypt's Personal Data Protection Law No. 151 of 2020, UAE Federal Decree-Law No. 45 of 2021, Saudi Arabia's Personal Data Protection Law (PDPL), GDPR, and other relevant regional regulations. + Act as the officially registered and certified Data Protection Officer (DPO) for SAP's legal entities in Egypt in front of the Egyptian Personal Data Protection Center (PDPC), ensuring all local registration and licensing requirements are met. + Develop and implement a comprehensive data protection compliance strategy for Egypt and assigned Arabian countries. + Monitor, interpret, and assess changes in data protection legislation, regulations, and industry standards across all assigned jurisdictions. + Provide timely updates, guidance, and legal opinions on regulatory developments and best practices. + Conduct and document the mandatory periodic evaluations, system inspections, and data protection audits as required by Article 9(1) of the Egyptian PDPL, and support the implementation of remediation measures. + **Strategic Advice & Representation:** + Provide legal and compliance advice on data protection issues and conduct Data Protection Impact Assessments (DPIAs) for new projects, initiatives, and emerging technologies, including AI/ML applications, ensuring alignment with the guidelines of the Egyptian PDPC and regional regulators. + Represent SAP's Group Data Protection Officer within the assigned region and serve as the direct, primary point of contact for the Egyptian PDPC and other regional supervisory authorities. + Drive the development, implementation, and maintenance of local data protection and privacy policies, standards, and procedures aligned with global requirements in accordance with SAP Global Data Protection and Privacy Strategy. + Assist local Legal Representatives (who carry statutory and criminal liability under Egyptian law) and Chief Finance Officers in fulfilling their local data protection responsibilities and dedicated legal entity processes. + **Compliance Monitoring, Risk Management & Operations:** + Monitor and advise LoBs implementing local procedures (Records of Processing Activities - ROPA) of data processing operations for the Egyptian entity, ensuring it is available for inspection by the PDPC. + Establish and monitor compliance with data protection policies, procedures, and regulatory requirements across all assigned entities. + Manage data breach response protocols, according to SAP’s established processes, ensuring that any personal data breach affecting Egyptian data subjects is reported to the PDPC and affected individuals within the statutory 72-hour window, in compliance with Article 9(6) of the PDPL. + Act as the dedicated point of contact for data subjects, establishing clear channels to receive, investigate, and resolve requests, complaints, and inquiries regarding their rights under Egyptian law and regional frameworks. + Support the execution of cross-border data transfer impact assessments and obtain necessary data transfer licenses and permits from the PDPC as required by Egyptian law. + **Awareness, Training & Organizational Development:** + Conduct targeted data protection and privacy training programs for various organizational levels, tailored to the compliance requirements of Egypt, Saudi Arabia, and the UAE. + Develop and maintain data protection awareness materials and communications. + Strengthen and expand SAP's global data protection community within the assigned region. + **Regional Coordination & Harmonization:** + Harmonize data protection documentation, processes, and compliance approaches across Egypt and assigned Arabian countries in alignment with global DPP standards, while strictly respecting local localization and sovereign cloud requirements (e.g., KSA and Egypt cloud regulations). + Coordinate data protection initiatives and ensure consistency in implementation across multiple jurisdictions. + Build and maintain collaborative relationships with local and regional stakeholders, including government authorities (specifically the PDPC in Egypt, SDAIA in KSA, and the UAE Data Office), industry partners, and external legal counsel. **EDUCATION AND QUALIFICATIONS / SKILLS AND COMPETENCIES** **Required skills** + University degree in Law with specialization in data protection, privacy, or information technology law + Minimum 10 years of professional experience as a Data Protection Officer, Chief Privacy Officer, or in a senior legal/compliance role focused on data protection + Thorough knowledge and practical experience with GDPR and other global data protection regulations + Demonstrated expertise in Egypt's Data Protection Law No. 151 of 2020 and/or UAE/Saudi Arabian data protection frameworks + Professional experience in managing cross-jurisdictional compliance initiatives + Strong project management capabilities with ability to lead complex, multi-stakeholder initiatives + Exceptional written and oral presentation skills with ability to communicate complex legal and technical concepts to non-specialist audiences + Strong communication skills at all organizational levels, including C-suite executives + Ability to build and maintain relationships with internal and external stakeholders, including regulatory authorities **Technical & Legal Expertise:** + Deep understanding of data protection principles, frameworks, and regulatory requirements across assigned jurisdictions + Proficiency in conducting DPIAs and risk assessments + Experience with data breach management and incident response protocols **Professional Competencies:** + Strong analytical and problem-solving skills with strategic thinking capability + Ability to work independently, manage multiple priorities, and lead cross-functional teams + Strong interpersonal skills and ability to influence at senior levels **Language Requirements (Essential):** + Fluency in Modern Standard Arabic and Egyptian Arabic (written and spoken) + Fluency in English (written and spoken) **Preferred Qualifications:** + CIPP-E (Certified Information Privacy Professional - Europe) certification + AIGP (AI Governance Professional) certification or equivalent + CIPM (Certified Information Privacy Manager) certification + Prior experience working with multinational organizations or in regulated industries + Experience with AI/ML governance and privacy by design principles **EXPECTED TRAVEL** 10-20% (for regional coordination, stakeholder meetings, and supervisory authority engagements across assigned Arabian countries) **Bring out your best** SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best. **We win with inclusion** SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world. SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com. For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program (https://one.int.sap/me@sap/jobs\_and\_hiring/employee\_referral/region/0000/lang/en) , according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training. Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements. Successful candidates might be required to undergo a background verification with an external vendor. **AI Usage in the Recruitment Process** For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process (https://jobs.sap.com/content/Ethical\_usage\_of\_AI\_in\_the\_recruiting\_process/?locale=en\_US) . Please note that any violation of these guidelines may result in disqualification from the hiring process. Requisition ID: 456857 | Work Area: Administration | Expected Travel: 0 - 20% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid