Data Privacy Expert

Location Riyadh KSAYears of Experience 3 5 years of relevant experienceProject Duration 4-5 monthsWorking Arrangement on-siteLanguage

Requirements Fluency in Arabic amp English written and spokenThe Data Privacy Expert contributes to developing implementing and overseeing the organization s personal data protection program to ensure compliance with Saudi PDPL and its Implementing Regulations while aligning with SDAIA and NDMO controls and international best practices Under the direction of the Data Management Senior Director Data Privacy Officer the role protects personal and sensitive information integrates privacy-by-design into data processing activities and strengthens data protection awareness across the organizationKey Requirements3 5 years of relevant experience in data protection or data privacySolid knowledge of fundamental data privacy principles including data minimization purpose limitation lawful basis and accountabilityProven experience implementing and maintaining data protection policies, procedures and standards including conducting DPIAs and embedding privacy-by-designComprehensive understanding of PDPL NDMO and SDAIA standardsExperience performing privacy risk assessments DPIAs and auditsFamiliarity with data classification and controls for protecting personal dataFamiliarity with data privacy management toolsPreferred QualificationsPrivacy certifications such as CIPM CIPP E or equivalent CDMP DAMAOther QualificationsBachelor's degree in Law Business Computer Science Information Management Cybersecurity or a related fieldStrong analytical reasoning and problem-solving abilitiesExcellent communication and consulting skillsEffective collaboration across functions and engagement with stakeholdersProject management skills attention to detail and thorough documentationKey ResponsibilitiesCompliance Assessment amp Audit Perform regular privacy compliance assessments and internal audits against the PDPL its Implementing Regulations NDMO SDAIA standards and internal policies recording findings and monitoring corrective actionsReview data processing activities to identify non-compliance or data handling risks and escalAssist with investigations into potential personal data protection violations and maintain the register of compliance records relating to personal data protectionRisk DPIA amp RoPA Conduct regular privacy risk assessments to identify evaluate and mitigate potential privacy risks maintaining the privacy risk register with clearly assigned owners and mitigation plansUndertake and document Data Protection Impact Assessments DPIAs for new or modified processing activities ensuring findings are recorded and incorporated into the organization s risk management and data protection strategiesKeep the Record of Processing Activities RoPA personal data inventories and data flow maps up to date as processing activities evolve including data monetization initiativesPrivacy Operations Notices Consent amp Data Subject Rights Assist in developing and maintaining privacy notices transparency statements and consent mechanisms that reflect actual processing purposes and legal bases ensuring changes are communicated to data subjectsSupport the implementation of processes for handling Data Subject Rights DSR requests including access correction deletion portability and objection within regulatory timelinesAssist with data breach detection recording and timely notification in accordance with the established breach management process and PDPL notification

requirements documenting evidence and lessons learnedThird-Party amp Cross-Border Processing Support privacy reviews of third-party vendor engagements and Data Processing Agreements DPAs including sub-processor and cross-border transfer controls aligned with PDPL statutory requirementsParticipate in privacy risk assessments of prospective suppliers and assist with ongoing monitoring of processor and vendor complianceAwareness Advisory amp Regulatory Alignment Provide guidance and training to relevant employees on their personal data protection

responsibilities and support Privacy Champions across business unitsStay informed of developments in PDPL NDMO and SDAIA

requirements to keep policies procedures and standards current while assisting the Data Privacy Officer with SDAIA NDMO coordinationIntegrate privacy-by-design and data minimization principles into projects and system changes from the initial stages3 5+ years of relevant experience in data protection or data privacy. Solid knowledge of fundamental data privacy principles, including data minimization, purpose limitation, lawful basis, and accountability.

Proven experience implementing and maintaining data protection policies, procedures, and standards, including conducting DPIAs and embedding privacy-by-design. Comprehensive understanding of PDPL, NDMO, and SDAIA standards. Experience performing privacy risk assessments, DPIAs, and audits. Familiarity with data classification and controls for protecting personal data. Familiarity with data privacy management tools.

Privacy certifications such as CIPM, CIPP/E, or equivalent; CDMP/DAMA. Bachelor's degree in Law, Business, Computer Science, Information Management, Cybersecurity, or a related field. Strong analytical reasoning and problem-solving abilities. Excellent communication and consulting skills. Effective collaboration across functions and engagement with stakeholders. Project management skills, attention to detail, and thorough documentation. #J-18808-Ljbffr.

Compensation: 250 - 420.