{bc}
Apply
linkedin

Data Privacy Consultant

Acuative Middle East
Jeddah, KSA
Full-time
Mid-Senior
Onsite
Discovered 1 months ago
Saudi Personal Data Protection LawSDAIA regulations and guidanceRecords of Processing ActivitiesData Protection Impact AssessmentsThird-party privacy risk assessmentsData breach management

Full Job Posting

About the Role

Acuative is hiring a Senior Data Privacy Consultant to work within the Personal Data Protection function of a leading Saudi research university.

The consultant will run day-to-day privacy operations and strengthen compliance with the Saudi PDPL and SDAIA regulations.

This is an operational role involving workshops, compliance artifacts, assessments, incidents, and coaching privacy champions.

Work Arrangement

  • The role requires working on-site full-time in Thuwal, KSA.
  • The stored source location is Jeddah, Makkah, Saudi Arabia.

Privacy Operations

  • Build, validate, and update Records of Processing Activities through business-unit workshops and sign-off.
  • Screen processing activities and conduct DPIAs for high-risk activities, including risk and control ownership and closure tracking.
  • Assess third-party processors, apply risk tiering, prescribe corrective actions, and coordinate with Procurement and business units.
  • Review vendor security controls, transfer risks, DPAs, and KSA Standard Contractual Clauses.
  • Support data breaches from containment through regulatory notification and cross-functional response.
  • Run the Privacy Hub and Spoke model by appointing, defining, training, and transitioning Privacy Champions.
  • Handle Data Subject Rights requests end to end and improve the DSR workflow.
  • Conduct data minimization reviews, update privacy notices, and support compliant retention and deletion procedures.
  • Develop and deliver specialized on-site and online privacy training.
  • Provide other privacy tasks requested by the PDP function and DPO.

Required Qualifications

  • At least six years in data privacy, data protection, or GRC roles, including at least two years of hands-on operational privacy work.
  • Deep knowledge of the Saudi PDPL, Implementing Regulations, Data Transfer Regulations, and SDAIA guidance.
  • Experience with RoPAs, DPIAs, third-party privacy risk assessments, personal data breaches, regulatory notification, DSR requests, and DSR registers.
  • Strong workshop facilitation and stakeholder management across business, legal, IT, security, and procurement teams.
  • Ability to draft DPAs, SCCs, privacy notices, retention schedules, role definitions, and training materials.
  • Fluent written and spoken English.
  • Willingness to work on-site full-time in Thuwal, KSA.

Preferred Qualifications

  • CIPP/E, CIPM, CIPT, or an equivalent privacy certification.
  • Experience with GRC platforms such as ServiceNow GRC, OneTrust, or Archer.
  • Background in higher education, research institutions, or human subject research data environments.
  • Arabic language proficiency.
  • Experience with ISO 27001, NCA ECC, and technical security controls in vendor contracts.
  • Familiarity with GDPR is a strong plus.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Acuative Middle East

Senior Network Consultant – Segment Routing / SRv6

, KSA

Discovered 1 weeks agoFull-time

Site Reliability Engineer & Observability

, KSA

Discovered 1 weeks agoFull-time

Senior Security Architect

Jeddah, KSA

Discovered 1 weeks agoFull-time

Cisco Engineer

, KSA

Discovered 3 weeks agoFull-time

Senior Blackboard Ultra consultants

Jeddah, KSA

Discovered 1 months agoFull-time