Data Protection Officer

Key Responsibilities

1.

Privacy Governance and Compliance

2.

Data Inventory and Records Management

3.

Data Subject Rights and Consent Management

4.

Risk Assessment and Privacy by Desigs

5.

Third-Party and Contractual Compliance

6.

Incident and Breach Management

7.

Awareness, Training, and Culture

8.

Monitoring, Audit, and Reporting

9.

Regulatory and Internal Coordination

Experience Minimum [2–4] years of experience in data protection, privacy compliance, legal compliance, governance, risk, or information security.

Experience in designing or managing privacy compliance programs.Experience with data mapping, DPIA, vendor reviews, breach handling, and policy development Experience working with Saudi regulatory requirements and PDPL is strongly preferred.Knowledge and Skills Strong understanding of personal data protection laws, especially Saudi PDPL.

Good knowledge of governance, risk, compliance, and information security principles.

Ability to translate legal and regulatory requirements into practical business controls.

Strong policy drafting, documentation, and reporting skills.Strong stakeholder management and communication skills.Ability to handle confidential and sensitive matters with professionalism.

Analytical thinking, attention to detail, and problem-solving ability.Ability to work cross-functionally with HR, Recruitment, Operations, Finance, Payroll, Legal, and IT.

QualificationsBachelor’s degree in law, Information Security, Cybersecurity, Compliance, Risk Management, Business Administration, or related field.Professional certifications are preferred, such as CIPP/E, CIPP/M, CIPM, CIP ISO 27701 Lead Implementer / Lead Auditor CDPSE or similar privacy / governance certifications

Experience Minimum [2–4] years of experience in data protection, privacy compliance, legal compliance, governance, risk, or information security.

Experience in designing or managing privacy compliance programs.Experience with data mapping, DPIA, vendor reviews, breach handling, and policy development Experience working with Saudi regulatory requirements and PDPL is strongly preferred.Knowledge and Skills Strong understanding of personal data protection laws, especially Saudi PDPL.

Good knowledge of governance, risk, compliance, and information security principles.

Ability to translate legal and regulatory requirements into practical business controls.

Strong policy drafting, documentation, and reporting skills.Strong stakeholder management and communication skills.Ability to handle confidential and sensitive matters with professionalism.

Analytical thinking, attention to detail, and problem-solving ability.Ability to work cross-functionally with HR, Recruitment, Operations, Finance, Payroll, Legal, and IT.

QualificationsBachelor’s degree in law, Information Security, Cybersecurity, Compliance, Risk Management, Business Administration, or related field.Professional certifications are preferred, such as CIPP/E, CIPP/M, CIPM, CIP ISO 27701 Lead Implementer / Lead Auditor CDPSE or similar privacy / governance certifications