Data Privacy Specialist

Role Overview

The Data Privacy Specialist is responsible for supporting, managing, and advancing the organization's data privacy program to ensure compliance with relevant data protection laws, privacy frameworks, and industry standards. This position plays a vital role in developing privacy governance, managing risks, compliance with regulations, and embedding privacy-by-design principles while protecting personal data throughout the company.

Key Responsibilities

• Formulate, enforce, and update data privacy policies, procedures, standards, and governance frameworks.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) to evaluate privacy risks.
• Ensure adherence to major data protection regulations, including PDPL, GDPR, NDMO, and other applicable mandates.
• Maintain detailed inventories of personal data, conduct data flow mapping, and classify information appropriately.
• Handle Data Subject Access Requests (DSARs) and manage compliance-related procedures.
• Evaluate third-party vendors and conduct privacy assessments of external partners.
• Perform privacy risk evaluations and continuity monitoring to ensure ongoing compliance.
• Assist in managing privacy-related incidents, including investigations, reporting, and corrective actions.
• Engage in Privacy-by-Design reviews for new systems, software, and organizational initiatives.
• Collaborate closely with various teams including business units, legal, compliance, cybersecurity, and IT to fortify privacy measures.
• Develop educational content and facilitate privacy awareness training throughout the organization.
• Keep abreast of changes in privacy regulations and recommend necessary adjustments to internal policies and controls.

Qualifications & Experience

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Computer Science, or a related field.
• Professional certifications such as CIPP, CIPM, ISO 27701, or DAMA are desirable.
• This role is open exclusively to Saudi nationals.
• Minimum of three years’ experience in data privacy, data governance, information security, compliance, risk management, or similar roles.
• Proven track record in leading privacy initiatives, conducting assessments, and managing regulatory compliance is preferred.

Skills & Expertise

• Expertise in managing data privacy programs.
• Conducting comprehensive Privacy Impact and Data Protection Impact Assessments.
• Maintaining inventories of personal data and performing data flow analyses.
• Managing Data Subject Rights requests efficiently.
• Evaluating third-party privacy risks and conducting vendor privacy assessments.
• Performing privacy risk management and continuous compliance monitoring.
• Handling privacy incident management and remediation processes.
• Applying Privacy-by-Design methodologies in projects.
• Ensuring regulatory compliance with PDPL, GDPR, NDMO, and applicable SAMA requirements.
• Developing and maintaining privacy policies, standards, and procedures.
• Understanding data governance and information lifecycle management principles.
• Effective stakeholder management and regulatory communication skills.
• Strong analytical capabilities, detailed documentation, and reporting proficiencies.
• Excellent communication and stakeholder engagement skills.