Personal Data Protection Officer (PDPO)

Role overview

SAPTCO is looking for a Personal Data Protection Officer to lead privacy governance and support compliance with applicable data protection obligations. The role focuses on building strong internal controls, guiding teams on privacy requirements, and helping the organization manage personal data responsibly.

Key responsibilities

• Create, roll out, and update policies and procedures for personal data protection in line with local and international requirements.
• Track data handling activities to make sure they follow relevant privacy rules and legal standards.
• Carry out routine reviews and risk checks to spot weaknesses and exposures tied to personal information.
• Act as the main contact for questions, concerns, and communications related to data protection for employees, partners, and regulators.
• Deliver employee training and awareness sessions on privacy, data handling, and protection practices.
• Work closely with IT and security teams to ensure the right technical and organizational safeguards are implemented.
• Maintain records and supporting documents for processing activities, including Data Protection Impact Assessments (DPIAs).
• Prepare compliance updates and report breaches or incidents to leadership and any required authorities.

Experience and skills

The position calls for 1 to 3 years of relevant experience. Candidates with backgrounds in risk, data security, and data protection are preferred. Hands-on familiarity with personal data protection frameworks and policies is important, along with a solid understanding of information security, data classification, and privacy controls. Strong knowledge of Saudi and global privacy regulations, including PDPL, NDMO, and GDPR, is expected.

Education and certifications

A bachelor’s degree is preferred in Law, but the role also fits candidates from Information Technology or Business Administration. Professional certification in CDMP is listed, while CIPP is preferred.