Personal Data Protection Specialist
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
ExeQut is seeking a Personal Data Protection Specialist to lead the implementation of the Saudi Personal Data Protection Law (PDPL) and ensure compliance. The role involves developing policies, managing data processing records, and coordinating with various departments.
Key Skills for This Role
Responsibilities
- Lead the personal data protection program and oversee compliance with the Saudi PDPL, its Implementing Regulations, and national Data Governance Policies.
- Establish and maintain a comprehensive record of processing activities (RoPA), including data inventories and data flows.
- Develop, review, and maintain privacy and data protection policies and procedures.
- Coordinate with IT, Information Security, Compliance, Legal, and Business units to embed PDPL requirements.
- Prepare and present regular reports to senior management on compliance status, key risks, incidents, and remediation plans.
Requirements
- Bachelor's degree in law, Sharia with law track, Information Systems, Computer Science, Cybersecurity, Data Management, or related discipline
- 4–7 years of relevant experience in data protection and privacy, data governance, information security, compliance, risk management, or internal audit
- Solid working knowledge of the Saudi PDPL, its Implementing Regulations, and national Data Management and Personal Data Protection Controls issued by SDAIA
- Strong ability to draft policies, procedures, and formal reports in both Arabic and English
Full Job Posting
Role Summary
- Seeking a Personal Data Protection Officer to lead the implementation of the Saudi Personal Data Protection Law PDPL and related regulations across the organization.
Key Responsibilities
- Lead the personal data protection program and oversee compliance with the Saudi PDPL, its Implementing Regulations, and national Data Governance Policies and Data Management & Personal Data Protection Standards issued by SDAIA/NDMO.
- Establish and maintain a comprehensive record of processing activities, RoPA, including data inventories and data flows between internal systems and external parties.
- Develop, review, and maintain privacy and data protection policies and procedures, including data subject rights, data retention, data sharing, and personal data breach management.
- Coordinate with IT, Information Security, Compliance, Legal, and Business units to embed PDPL requirements into systems, contracts, projects, and change initiatives, and support privacy impact and risk assessments DPIA when required.
- Prepare and present regular reports to senior management on compliance status, key risks, incidents, and remediation plans.
- Experience with data transfer outside the Kingdom.
Qualifications And Experience
- Bachelor's degree in law, Sharia with law track, Information Systems, Computer Science, Cybersecurity, Data Management, or a related discipline.
- 4–7 years of relevant experience in one or more of the following domains: data protection and privacy, data governance, information security, compliance, risk management, or internal audit, with proven exposure to Saudi or GCC environments.
- Solid working knowledge of the Saudi PDPL, its Implementing Regulations, and the national Data Management and Personal Data Protection Controls issued by SDAIA, preferably with hands on experience in a PDPL compliance or alignment project.
- Strong ability to draft policies, procedures, and formal reports in both Arabic and English and to interact with regulators and internal governance committees.
Skills Required
- Good understanding of data management and data governance concepts, including data classification, data quality, and key national frameworks.
- Familiarity with information security and risk management practices, and the ability to collaborate with technical and non technical stakeholders.
- Excellent communication, influencing, and awareness building skills with the ability to promote a culture of personal data protection across the organization.
Additional Information
- Role Type: Full Time
- Location: Onsite
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at exequt
Information Security / DLP Specialist
Riyadh, KSA
We are seeking a mid-level Information Security professional with hands-on DLP experience and GRC background for an onsite project in Riyadh. Responsibilities include implementing DLP solutions, monitoring alerts, and su
One Identity Manager Administrator
Riyadh, KSA
ExeQut is seeking a mid-level One Identity Manager Administrator to support the administration, configuration, and maintenance of the One Identity Manager platform. The role involves user lifecycle management, access gov
One Identity Developer
Riyadh, KSA
Company Overview ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce t
SailPoint Consultant
Riyadh, KSA
Company Overview ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce t