Saudi Data Protection Officer (DPO)

EY is seeking a Saudi National for the role of Saudi Data Protection Officer (DPO) at the rank of Assistant Director (Manager). This position is crucial for ensuring compliance with the Saudi Personal Data Protection Law as part of our Risk Management function. The successful candidate will join a dynamic team focused on the evolving Saudi data protection legal framework and will be responsible for ensuring compliance across all our member firms in Saudi Arabia.

The DPO will serve as a technical subject matter expert, providing guidance to service line professionals and supporting the regional team with expertise in the data protection regulatory landscape. The individual will also promote the firm’s commitment to data protection, privacy, and risk management policies.

Key Responsibilities:

• Informing and advising personnel regarding obligations under the Saudi Personal Data Protection Law.
• Monitoring compliance across all EY Saudi firms and conducting internal audits as necessary.
• Acting as the contact point for the supervisory authority on data processing issues.
• Responding to inquiries from data subjects concerning data protection practices.
• Developing and delivering personal data protection training.
• Assisting with procedures for personal data breach handling and developing response plans.
• Maintaining up-to-date knowledge of data protection laws and regulations.
• Providing support to executive partners regarding their compliance responsibilities.
• Assisting with practice inspections by external regulators and contributing to risk management projects.

Skills and Attributes for Success:

• Strong analytical, critical thinking, and problem-solving abilities.
• Excellent IT, business writing, communication, and presentation skills.
• Ability to operate in a busy, deadline-driven environment.
• High degree of integrity and honesty.
• Confidence in dealing with senior executives.

Qualifications:

• 2-5 years of experience in data protection, data privacy, or a legal function with relevant experience.
• Relevant academic qualifications in Personal Data Protection.
• Experience in risk management, internal compliance, or legal functions in large organizations, preferably in Saudi Arabia.

Language Requirements:

• Proficiency in Arabic and English is preferred.

What We Offer:

• Competitive compensation based on performance.
• Continuous learning and development opportunities.
• Supportive and inclusive work culture.