Data Processing Officer

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Data Protection Officer — Hitachi Rail GTS Egypt LLC (ref HRE-LCC-PDPL-JD-001)

Why now: PDPL Law 151/2020 and Decree 816/2025 require a PDPC-accredited DPO. The grace period ends 1 November 2026, and the company has no DPO today. That makes this the largest open compliance gap in LCC Egypt, and the facial recognition positions on AQM, ART and CML1 depend on filling it.

The post: Full-time, permanent, based in Cairo. It reports to the LCC Country Head, with direct access to the Country Director and LCC Regional Head MEA. The DPO's statutory independence is protected, and no dual IT, HR or systems-owner role is allowed.

Core duties:

Act as PDPC point of contact and handle registration, licences and permits

Run the ROPA, DPIAs and data processing audit

Handle breaches (72-hour notification) and data subject requests

Manage cross-border transfer approvals, including high-risk systems

Draft data protection terms in contracts, subcontracts and bids

Deliver staff training and quarterly reporting

Requirements:

PDPC accreditation, or passing the exam within a set period (company-funded)

Degree in Law, IT, Computer Science, Information Systems or Engineering

7+ years in privacy, compliance or technology law, including 3+ years running a programme

Direct experience with Egyptian regulators

Fluent Arabic and professional English