Data Protection & Governance Specialist

Overview

Personal Data Protection (Pdpl)

• Establish and maintain the organization’s privacy governance framework.
• Develop and maintain data protection policies, procedures, and standards.
• Define data privacy-related KPIs and monitor them periodically.
• Lead and coordinate Privacy Impact Assessments (PIA / DPIA) for systems and initiatives involving personal data.
• Maintain records of personal data processing activities.
• Ensure processes exist to manage data subject rights requests (access, correction,deletion).
• Support incident response processes related to personal data breaches.
• Provide guidance to internal teams regarding proper handling of personal data.
• Support regulatory alignment with the Saudi Personal Data Protection Law (PDPL).

Data Governance & Ndmo Compliance

• Lead the implementation of a data governance framework aligned with NDMO standards.
• Establish and maintain the organization’s data classification framework.
• Define and coordinate data ownership and stewardship models across the organization.
• Develop policies governing data lifecycle management, including retention and disposal.
• Support implementation of data quality management and metadata standards.
• Maintain data inventory and data asset management documentation.
• Coordinate NDMO compliance assessments and remediation activities.

Governance Coordination & Awareness

• Promote awareness of data protection and data governance requirements across theorganization.
• Provide guidance to business units on proper data handling and classification.
• Support the development of training programs related to data protection and governance.
• Coordinate with Legal, Compliance, Risk, and Technology teams to ensure regulatory alignment.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Law, or related field.
• 2–4 years of experience in data protection, privacy, data governance, or cybersecurity governance roles.
• Experience working in regulated environments such as financial services or fintech.
• Familiarity with PDPL, NDMO, and regulatory governance frameworks is preferred.
• Saudi Nationality

Preferred Certifications

• CIPP/E or CIPP/M – Certified Information Privacy Professional
• ISO 27001 Foundation or Lead Implementer

Key Skills

• Strong understanding of data protection and privacy principles.
• Knowledge of data governance frameworks and regulatory compliance.
• Ability to develop policies and governance documentation.
• Strong stakeholder coordination and communication skills.
• Strong analytical and organizational capabilities.