Personal Data Protection Specialist

exequt mena; As Sudiyah; On-site; OMR 31,000 - 55,000; Full time

Benefits offered by this job

Full-Time

Onsite

Job summary

ExeQut seeks a Personal Data Protection Officer to lead the PDPL implementation across the organization, ensuring robust protection of personal data and ongoing compliance with national and sectoral requirements.

The role requires experience with data transfer outside the Kingdom and strong collaboration with IT, Legal, Compliance, and Business units to embed privacy controls into systems and contracts.

Qualifications

• Bachelor's degree in a relevant field (Law/Sharia with law track, IS, CS, Cybersecurity, Data Management).
• 7+ years of experience in data privacy/compliance.
• Experience as Data Privacy Officer in banking or similar sectors.
• Solid knowledge of Saudi PDPL and related regulations; GCC exposure.
• Ability to draft policies and reports in Arabic and English; interact with regulators.

Responsibilities

• Lead the PDPL program and ensure compliance with PDPL & Implementing Regulations.
• Maintain RoPA, data inventories, and data flows with internal/external parties.
• Develop and update privacy policies and data retention procedures.
• Collaborate with IT, Legal, Compliance, and Security to embed PDPL requirements.
• Prepare reports on compliance status, risks, and remediation plans.

Skills

PDPL compliance

Data privacy officer

Data governance

Policy drafting

Arabic & English

Education

Bachelor's degree in Law / Sharia with law track or related field

Tools

SAMA/SDAIA standards

Data protection frameworks

Job description

Company Overview

ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce the total life-cycle cost of ownership. At ExeQut, we prioritize understanding core business issues and developing solutions that add immediate value. Transparency and communication are the cornerstones of our approach. Our projects are partnerships, ensuring that clients are involved in every step of the journey, from inception to completion.

Company Overview

ExeQut is consulting done right. We are a trusted vendor for enterprise apps and portals, and our proprietary development process enables us to deliver on time, avoid common design mistakes, and reduce the total life-cycle cost of ownership. At ExeQut, we prioritize understanding core business issues and developing solutions that add immediate value. Transparency and communication are the cornerstones of our approach. Our projects are partnerships, ensuring that clients are involved in every step of the journey, from inception to completion.

Role Summary

Seeking a Personal Data Protection Officer to lead the implementation of the Saudi Personal Data Protection Law PDPL and related regulations across the organization, ensuring robust protection of individuals' personal data and ongoing compliance with national and sectoral requirements.

Key Responsibilities

• Lead the personal data protection program and oversee compliance with the Saudi PDPL, its Implementing Regulations, and national Data Governance Policies and Data Management & Personal Data Protection Standards issued by SDAIA/NDMO.
• Establish and maintain a comprehensive record of processing activities, RoPA, including data inventories and data flows between internal systems and external parties.
• Develop, review, and maintain privacy and data protection policies and procedures, including data subject rights, data retention, data sharing, and personal data breach management.
• Coordinate with IT, Information Security, Compliance, Legal, and Business units to embed PDPL requirements into systems, contracts, projects, and change initiatives, and support privacy impact and risk assessments DPIA when required.
• Prepare and present regular reports to senior management on compliance status, key risks, incidents, and remediation plans.
• experience with data transfer outside the Kingdom.

Qualifications And Experience

• Bachelor's degree in Law, Sharia with law track, Information Systems, Computer Science, Cybersecurity, Data Management, or a related discipline.
• 7+ years of relevant experience in one or more of the following domains
• Detailed experience in the banking sector as Data Privacy Officer
• data protection and privacy, data governance, information security, compliance, risk management, or internal audit, with proven exposure to Saudi or GCC environments.
• Solid working knowledge of the Saudi PDPL, its Implementing Regulations, and the national Data Management and Personal Data Protection Controls issued by SAMA or SDAIA, preferably with hands-on experience in a PDPL compliance or alignment project.
• Strong ability to draft policies, procedures, and formal reports in both Arabic and English and to interact with regulators and internal governance committees.

Preferred Professional Certifications

• Certifications are not mandatory, but are considered a strong plus
• Privacy and data protection
• CIPP/E, CIPP/A, CIPM, CIPT, or equivalent recognized privacy certifications.
• Information security and governance
• CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, ISO 27701 training, or data management certifications such as CDMP.

Skills Required

• Good understanding of data management and data governance concepts, including data classification, data quality, and key national frameworks.
• Familiarity with information security and risk management practices, and the ability to collaborate with technical and non-technical stakeholders.
• Excellent communication, influencing, and awareness-building skills with the ability to promote a culture of personal data protection across the organization.

Additional Information

• Role Type: Full-Time
• Location: Onsite

Join ExeQut and be part of a dynamic team ensuring data integrity and accessibility for business success!