Data Protection Officer (DPO)

Job description

About the Role the employer is looking for a Data Protection Officer (DPO) to lead and oversee the organisation's data privacy and protection framework. This full-time position is located in Jeddah, Makkah Province, and focuses on ensuring compliance with the Saudi Arabia Personal Data Protection Law (PDPL), its implementing regulations, and other applicable regulatory requirements. Key Responsibilities Develop, implement and maintain the organization's data protection and privacy compliance framework in accordance with the Saudi Personal Data Protection Law and its implementing regulations and applicable Saudi Arabian Monetary Agency requirements. Monitor regulatory developments and ensure ongoing compliance with applicable data protection laws and standards. Act as the primary point of contact for relevant regulatory authorities on data protection matters. Advising senior management on privacy risks, regulatory obligations and compliance improvements. Develop, review and maintain privacy policies, procedures, data retention schedules and internal guidelines. Conduct and oversee privacy impact assessments (PIAs/DPIAs) for new products, systems and business processes. Identify, assess and mitigate privacy risks associated with the processing of personal data, third party suppliers and cross-border data transfers. Embed the principles of privacy by design and privacy by default into business processes. Establish and manage processes to handle Data Subj etc. Access Requests (DSARs) and other data subject rights under the Saudi Personal Data Protection Law, in coordination with Information Security, Legal Affairs and IT teams to ensure compliance For compatible and timely responses. Monitor compliance with data protection requirements and maintain appropriate documentation and audit evidence. Develop and provide training programs to raise awareness of employee privacy and data protection. Collaborate with Legal, Compliance, Cybersecurity, IT, Product and Business teams to ensure effective privacy controls. Required Qualifications Bachelor's degree in law, information security, cybersecurity, compliance, information technology, or related field. Professional privacy certifications such as CIPP/E, CIPM and CIPP/A are preferred. Proven working experience in data protection, data privacy, privacy compliance or regulatory compliance. Strong knowledge of the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. Understand the regulatory requirements of the Saudi Arabian Monetary Agency and their application to financial institutions, payment service providers or fintech companies. Proven experience in developing and implementing privacy policies, data protection frameworks and compliance procedures. Hands-on experience conducting Privacy Impact Assessments (PIAs/DPIAs), Privacy Risk Assessments, and maintaining Records of Processing Activities (RoPA). Experience managing data subject rights requests (DSARs), personal data breaches, and responding to privacy incidents. Skills and Abilities Ability to collaborate with cross-functional teams and communicate organizational requirements to technical and non-technical stakeholders. Strong skills in analysis, documentation, communication and stakeholder management. Work Environment The ideal candidate will have practical experience implementing wildlife protection programmes Nat, conduct Privacy Impact Assessments (PIAs/DPIAs), manage privacy risks, and advise stakeholders on data protection obligations, preferably within FinTech, banking, payments or other regulated financial services environments

Requirements

• · Develop and deliver employee privacy and data protection awareness training programs
• · Proven experience in developing and implementing privacy policies, data protection frameworks and compliance procedures

Skills