Data Privacy Specialist

Data Privacy Specialist – Ensuring Compliance and Safeguarding Data Integrity in a Dynamic Environment

Join our forward-thinking organization in Riyadh, Saudi Arabia, as a **Data Privacy Specialist**, where you will play a pivotal role in shaping and enforcing our privacy program while ensuring full compliance with the Saudi Personal Data Protection Law (PDPL). In this full-time, onsite position, you will drive impactful initiatives that protect sensitive information, mitigate risks, and foster a culture of privacy awareness across the organization.

As a key member of our compliance team, you will be responsible for implementing robust privacy frameworks, conducting thorough assessments, and collaborating with stakeholders to uphold the highest standards of data governance. This role is ideal for a detail-oriented professional with a passion for privacy, regulatory compliance, and technological innovation.

Key Responsibilities:

• Lead Privacy Program Implementation: Oversee the development, execution, and continuous improvement of our privacy program to ensure alignment with Saudi PDPL and international best practices.
• Document and Manage Data Processing Activities: Develop and maintain comprehensive Records of Processing Activities (ROPA) to track data flows, purposes, and legal bases, ensuring full transparency and accountability.
• Conduct Critical Privacy Assessments: Perform Data Protection Impact Assessments (DPIAs) to identify, evaluate, and mitigate privacy risks associated with high-risk processing activities.
• Handle Data Subject Rights (DSR) Requests: Efficiently manage and process requests related to data access, rectification, erasure, and portability, ensuring timely and accurate responses.
• Investigate Data Breaches: Support assessments and investigations into personal data breaches, collaborating with IT and legal teams to determine root causes and implement remedial actions.
• Assess Third-Party Vendors: Conduct privacy due diligence and compliance reviews for third-party vendors to ensure they meet our stringent data protection standards.
• Evaluate Cross-Border Data Transfers: Assess and facilitate compliant cross-border data transfers, ensuring adherence to legal requirements and organizational policies.
• Maintain Compliance Evidence: Keep updated privacy risk registers and gather evidence to demonstrate compliance with regulatory obligations.
• Leverage Microsoft Purview: Support compliance activities within Microsoft 365 and Microsoft Purview, utilizing advanced tools to monitor, classify, and protect sensitive data.
• Develop Privacy Awareness Materials: Create engaging training modules, reports, and key performance indicators (KPIs) to educate employees and stakeholders on privacy best practices.

This role requires a strategic thinker with a deep understanding of data privacy principles, regulatory landscapes, and emerging technologies. You will thrive in an environment that values innovation, collaboration, and a proactive approach to risk management.

Requirements:

• 5+ Years of Professional Experience: Proven track record in data privacy, data protection, or a related field, with at least 3+ years of specialized experience in privacy compliance.
• Expertise in Saudi PDPL: In-depth knowledge of the Saudi Personal Data Protection Law, including its requirements, enforcement mechanisms, and implications for organizational operations.
• Practical Experience with Core Privacy Tools: Hands-on experience with ROPA, DPIA, and DSR processes, demonstrating the ability to apply these frameworks in real-world scenarios.
• Vendor Privacy Assessments: Experience conducting privacy due diligence and compliance reviews for third-party vendors, ensuring alignment with contractual and regulatory obligations.
• Microsoft Purview Proficiency: Technical familiarity with Microsoft Purview and Microsoft 365 compliance features, including data classification, retention policies, and eDiscovery tools.
• Bilingual Communication: Fluency in both English and Arabic to effectively engage with diverse stakeholders and navigate multilingual compliance documentation.
• Certifications (Preferred): Holdings such as CIPP, CIPM, CIPT, or CDPSE (or equivalent) are highly advantageous, showcasing expertise in global privacy standards.

If you are a results-driven professional with a commitment to ethical data stewardship and a desire to make a meaningful impact in a dynamic organization, we invite you to apply and contribute to our mission of fostering trust through privacy excellence.