Data Protection Officer (DPO)

We are seeking an experienced Privacy & Data Protection Manager with 5+ years of relevant experience to lead and manage the company's privacy program, ensuring compliance with Saudi PDPL, SAMA Cyber Security Framework, NDMO controls, and applicable international requirements such as GDPR.

Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time

Key Responsibilities:

• Own and govern the company's privacy and data protection program end-to-end.
• Ensure compliance with PDPL, SAMA CSF, NDMO, and applicable GDPR requirements.
• Maintain RoPA, data flow maps, retention schedules, and lawful basis registers.
• Lead DPIAs, Legitimate Interest Assessments (LIAs), and Privacy-by-Design reviews for new products, AI/analytics, core banking changes, and third-party integrations.
• Manage data subject rights, consent, and privacy complaints within regulatory timelines.
• Act as a privacy liaison with SDAIA, SAMA, Internal Audit, Legal, and Compliance.
• Conduct third-party privacy due diligence, DPAs, and ongoing vendor monitoring.
• Coordinate privacy incidents and data breach response with SOC and Legal.
• Support regulatory notification decisions, RCA, remediation, and Board-level privacy risk reporting.

Required Skills & Experience:

• 5+ years of experience in Data Privacy, Data Protection, Information Security, or a related field.
• Banking/financial services experience preferred.
• Strong knowledge of Saudi PDPL, SAMA CSF, NDMO, and GDPR.
• Hands-on experience with RoPA, DPIAs, LIAs, data mapping, consent, and retention governance.
• Experience in third-party privacy risk, DPAs, and outsourcing compliance.
• Strong understanding of privacy incident and breach management.
• Excellent stakeholder management and communication skills.
• Experience working with regulators, Internal Audit, Legal, Compliance, and senior management.