Head of Data Protection & Cybersecurity Risk

About the role

As the leader of Data Protection and Cybersecurity Risk at FIFA, you will shape and execute a global strategy that safeguards sensitive information and aligns with business objectives. You will work closely with internal stakeholders, member associations, and external regulators to ensure the highest standards of privacy and security.

Key responsibilities

• Develop and implement FIFA’s Data Protection & Cybersecurity Risk strategy.
• Ensure global compliance with data protection laws and regulations.
• Create and maintain data protection policies, procedures, and guidelines.
• Conduct regular risk assessments, audits, and Data Protection Impact Assessments.
• Provide legal counsel on privacy risks for new projects and systems.
• Act as the primary contact for data protection authorities, customers, and employees.
• Establish security governance structures and oversee incident response plans.
• Promote security awareness through training and communication campaigns.
• Manage third‑party vendor relationships to ensure compliance with security standards.

Required profile

• 10+ years of experience in data protection, privacy, or cybersecurity risk management.
• Master’s degree in Compliance, Law, Technology or a related field.
• Professional certifications such as CIPM, CISSP, CISM or CISA (advantageous).
• Strong knowledge of IT risk frameworks and standards (NIST, COSO, COBIT, ISO 27001).
• Excellent analytical, problem‑solving and strategic planning abilities.
• Ability to communicate complex privacy concepts to diverse audiences.

Required skills

• NIST framework
• COSO framework
• COBIT framework
• ISO 27001 standard

What we offer

• Opportunity to lead data protection and cybersecurity at a world‑renowned sports organization.
• Collaborative, innovative environment with a global impact.