Data Protection Officer (DPO) - Riyadh

About drovox

drovox is a Saudi-based mobility technology company dedicated to delivering smooth, trustworthy, and locally tailored transportation services. The platform links riders with independent drivers called drovox Heroes, offering secure, clear, and user-friendly ride-hailing options. drovox is building a scalable mobility system catering to individuals, enterprises, institutions, events, and strategic collaborators using technology, data, and user-oriented design. With strong insight into Saudi Arabia’s evolving city requirements, drovox prioritizes safety, high service standards, and comprehensive mobility operations.

As the company expands, it is reinforcing governance, operational capabilities, and talent acquisition in areas including transportation technology, AI, and corporate mobility solutions.

Role Overview

The Data Protection Officer (DPO) at drovox is responsible for overseeing data privacy and protection throughout the organization. Based in Riyadh, this full-time on-site position ensures adherence to pertinent data protection laws and regulations, including those specific to Saudi Arabia and relevant international standards. The DPO will design, implement, and maintain privacy policies, processes, and controls, and perform regular audits and risk assessments to mitigate data protection issues.

Daily activities include advising teams on privacy-by-design, evaluating the privacy impact of new products and features, managing data subject requests, and liaising with regulatory bodies as required. Close collaboration with legal, technology, operations, and customer experience departments is essential to uphold robust privacy governance and secure data management within drovox's mobility ecosystem.

Key Qualifications

• Expertise in data protection and privacy compliance.
• Experience with regulatory compliance and legal frameworks, ideally in technology, transportation, or mobility sectors.
• Track record of developing and managing privacy policies and governance structures.
• In-depth knowledge of Saudi data privacy regulations and familiarity with international standards such as GDPR.
• Bachelor’s degree or higher in Law, Information Security, Computer Science, or closely related fields.
• Proficiency in performing privacy impact assessments, risk analysis, and internal auditing.
• Adept at cross-functional collaboration and communicating complex privacy concepts clearly.
• Strong analytical skills, meticulous attention to detail, and a proactive mindset for problem-solving and improvement.
• Certifications like CIPP, CIPM, CIPT, or equivalent are advantageous.
• Proficient in English; Arabic language skills are highly valuable for communication with local stakeholders and regulators.