Assistant Manager - Data Privacy

About This Role

Job Purpose:

• We are looking for an Assistant Manager to join our Data Privacy function within the Risk Management Group. In this role, you will support the delivery and operation of the second-line privacy compliance framework. The successful candidate will play a central role in delivering AESA's Data Protection Strategy.
• The ideal candidate is passionate about data protection and privacy, eager to deepen their expertise, and looking to grow within a structured and supportive environment. .

Key Responsibilities:

• Supporting the monitoring of AESA’s compliance with the Personal Data Protection Law (PDPL)
• Serving as deputy to the DPO in their absence
• Following up on action items arising from relevant committee meetings and regulatory audits related to data protection
• Conducting privacy impact assessments (PIAs) for new projects, systems, and processes
• Updating AESA’s records of processing activities (RoPA)
• Supporting the development and delivery of data protection awareness and training programs for employees and third parties
• Assisting in managing data breach incidents, including documentation, escalation, and regulatory notification where required
• Providing data protection advice and guidance to business units on day-to-day queries
• Handling of data subject rights requests
• Liaising with key internal (Legal, Risk, etc.) and external (KSA regulators, advisors, vendors, partners, etc.) stakeholders as required
• Supporting internal audit activities related to data protection, including preparing documentation, responding to findings, and tracking remediation actions
• Managing third-party data protection risks, including conducting due diligence on vendors and monitoring ongoing compliance obligations
• Supporting the review and update of data protection policies and procedures to ensure they remain current and aligned with regulatory requirements
• Supporting the implementation of any directives issued by the Saudi Central Bank (SAMA) related to data privacy
• Carrying out legitimate interests assessments (LIAs) where required to establish a lawful basis for processing activities
• Liaising with global teams and international counterparts where required to ensure alignment on data protection standards and obligations
• Carrying out transfer impact assessments (TIAs) to evaluate and document the risks associated with cross-border data transfers
• Tracking and reporting of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) on a monthly basis

Required Skills & Competencies:

• Experience: 2 years of data privacy/protection experience
• Educational Background: Bachelor's degree in Cybersecurity, Law, or a related field.
• Certificates: CIPP/E, CIPM or other recognized certificates
• English language: Proficient in written and spoken English is required.
• This job is for Saudi national only