Data privacy operations consultant
Role Overview
Deliver hands-on privacy operations support to the Personal Data Protection function.
Enhance compliance posture under Saudi Personal Data Protection Law, implementing regulations, SDAIA requirements, and KSA Standard Contractual Clauses.
Work as an extension of the DPO team and progressively hand privacy responsibilities to business-unit Privacy Champions.
Key Skills for This Role
Full Job Posting
Role Summary
Deliver hands-on privacy operations support to the Personal Data Protection function.
Enhance compliance posture under Saudi Personal Data Protection Law, implementing regulations, SDAIA requirements, and KSA Standard Contractual Clauses.
Work as an extension of the DPO team and progressively hand privacy responsibilities to business-unit Privacy Champions.
Location
- Jeddah, Kingdom of Saudi Arabia, on-site.
Privacy Operations Responsibilities
- Identify missing processing activities and develop, validate, update, and secure sign-off for RoPAs.
- Screen processing activities, conduct DPIAs for high-risk activities, identify risks and controls, and record risks in the GRC solution.
- Assess high-risk data processors, recommend corrective actions, and notify procurement and relevant business units.
- Review vendor controls in DPAs, conduct transfer risk assessments, and build security controls into DPAs and KSA SCCs.
- Support breach containment, regulatory notification, mitigation, root-cause analysis, and SDAIA inquiry responses.
- Identify, train, and hand over privacy activities to business-unit Privacy Champions.
- Record, coordinate, validate, respond to, and close data subject rights requests.
- Review data minimization risks, privacy notices, retention schedules, and technical implementation SOPs.
- Develop and deliver specialized on-site privacy training and online training modules.
Qualifications and Experience
- Bachelor's degree in Law, Information Security, Risk, Information Systems, Computer Science, or a related field.
- Master's degree is an advantage.
- At least 8 years of professional experience, including at least 5 years in data privacy, data protection, or privacy risk within a large or regulated organization.
- Experience with data privacy operations management tools such as ServiceNow or OneTrust is required.
Key Deliverables
New and validated RoPAs signed off by business-unit heads and the DPO.
DPIA gating results, DPIA reports, documented risks, controls, owners, and GRC records.
Processor risk assessments, corrective action plans, transfer assessments, DPA and SCC control clauses, and researcher guidance.
Breach case files, root-cause analyses, notification drafts, and SDAIA inquiry responses.
Privacy Champion role documentation, onboarding sessions, and three-month SME support.
Maintained data subject rights register, process improvement recommendations, privacy notices, retention schedules, and training modules.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career