Data Protection & Governance Specialist

About Us

Personal Data Protection (Pdpl)

• Establish and maintain the organization's privacy governance framework
• Develop and maintain data protection policies, procedures, and standards
• Define data privacy-related KPIs and monitor them periodically
• Lead and coordinate Privacy Impact Assessments (PIA / DPIA) for systems and initiatives involving personal data
• Maintain records of personal data processing activities
• Ensure processes exist to manage data subject rights requests (access, correction,deletion)
• Support incident response processes related to personal data breaches
• Provide guidance to internal teams regarding proper handling of personal data
• Support regulatory alignment with the Saudi Personal Data Protection Law (PDPL)

Data Governance & Ndmo Compliance

• Lead the implementation of a data governance framework aligned with NDMO standards
• Establish and maintain the organization's data classification framework
• Define and coordinate data ownership and stewardship models across the organization
• Develop policies governing data lifecycle management, including retention and disposal
• Support implementation of data quality management and metadata standards
• Maintain data inventory and data asset management documentation
• Coordinate NDMO compliance assessments and remediation activities

Governance Coordination & Awareness

• Promote awareness of data protection and data governance requirements across theorganization
• Provide guidance to business units on proper data handling and classification
• Support the development of training programs related to data protection and governance
• Coordinate with Legal, Compliance, Risk, and Technology teams to ensure regulatory alignment

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Information Systems, Law, or related field.
• 2-4 years of experience in data protection, privacy, data governance, or cybersecurity governance roles
• Experience working in regulated environments such as financial services or fintech
• Familiarity with PDPL, NDMO, and regulatory governance frameworks is preferred
• Saudi Nationality

Preferred Certifications

• CIPP/E or CIPP/M - Certified Information Privacy Professional
• ISO 27001 Foundation or Lead Implementer

Key Skills

• Strong understanding of data protection and privacy principles
• Knowledge of data governance frameworks and regulatory compliance
• Ability to develop policies and governance documentation
• Strong stakeholder coordination and communication skills
• Strong analytical and organizational capabilities