BigID Data Service Expert

TAWANTECH; Al Khobar; On-site; SAR 150,000 - 200,000; Full time

Job summary

A technology company in Al Khobar is seeking a Data Privacy Specialist to manage the BigID platform, ensuring compliance with the Saudi Personal Data Protection Law (PDPL). The role involves developing critical modules, handling data requests, and leading integration efforts with enterprise solutions. The ideal candidate has over 5 years of relevant experience and a strong understanding of data privacy and security frameworks in the Saudi financial sector. This is a pivotal role requiring collaboration with various teams to manage data privacy initiatives effectively.

Qualifications

• 5+ years of experience with the BigID platform or in a similar role.
• Expertise in Saudi Personal Data Protection Law (PDPL).
• Experience with data governance and privacy frameworks specific to Saudi financial sector.

Responsibilities

• Develop and maintain the BigID platform's critical modules.
• Lead the implementation of BigID-related change requests.
• Manage consumer data requests and fulfill access rights.

Skills

BigID platform management

Azure DevOps

OpenShift knowledge

Linux

Kubernetes

REST APIs

Data management practices

Interpersonal skills

Analytical skills

Communication skills

Education

Bachelor’s degree in computer science or related field

Tools

ServiceNow

Usercentrics

Informatica

Job description

Responsibilities

• Develop and maintain the BigID platform's value and critical modules, including core discovery functions, main use cases, and foundational elements such as data sources, correlation sets, policies, sensitivity, Tag, rules, classifiers, and key features.
• Take charge of the installation, configuration, and upgrades for BigID and Usercentrics modules.
• Ensure that the platform operates smoothly through proactive maintenance and oversight.
• Manage scan operations diligently, ensuring comprehensive data source scanning and classification.
• Monitor system performance regularly and troubleshoot any issues that arise.
• Lead the implementation of BigID-related change requests, including the integration of privacy portals with digital channels, ensuring all changes align with organizational goals.
• Facilitate integration with data protection and security technologies and enhance enterprise solutions through BigID’s metadata exchange capabilities. Your role will involve ensuring seamless workflows that drive efficiency.
• Utilize BigID functions to effectively implement data privacy use cases.
• Managing consumer data requests, access rights fulfillment, Privacy Impact Assessments (PIA), Record of Processing Activities (RoPA), and data deletion.
• Drive the implementation of data security and protection use cases, focusing on access intelligence, risk assessment, data remediation, and breach response.
• Work collaboratively with cross-functional teams to align on data protection initiatives.
• Ability to integrate BigID with tools like Informatica will be key in deriving business value from the platform.

Requirements

• Strong experience with BigID platform management, including installation, configuration, and operations.
• Proficiency in Azure DevOps for CI/CD processes.
• Familiarity with Usercentrics modules and functionalities.
• Knowledge of OpenShift for container orchestration.
• Experience in container administration, module configuration, upgrades, and monitoring.
• Technical familiarity with Linux, Kubernetes, networking, databases, and REST APIs.
• Proven experience integrating BigID with ServiceNow and other enterprise solutions.
• Knowledge of data management practices, including NDMO PDPL and NCA compliance.
• Excellent analytical skills to troubleshoot complex issues and design effective workflows.
• Strong interpersonal skills to work effectively with cross-functional teams.
• Ability to communicate technical concepts to non-technical stakeholders.
• Provide regular reports to senior management and relevant stakeholders on privacy program effectiveness, compliance status, and emerging privacy risks.
• Serve as a liaison between Business and Functional areas and technology to ensure data-related business requirements for protecting personal and sensitive data are clearly defined, communicated, and well understood.
• Support the bank in prioritizing processing activities.
• Conduct data flow mapping exercises to identify the journey of personal data from collection to destruction, covering data collection points, systems used for processing, storage, etc.
• Conduct the RoPA exercise and maintain its repository for all personal data processing activities.
• Conduct PIAs for all processing activities identified in the RoPAs to determine which require DPIAs.
• Perform DPIAs based on the results of the PIAs.
• Review the existing ERM framework and provide recommendations for changes considering the KSA PDPL requirements and collaborate with the ERM team to enhance the framework.
• Offer consultation in the event of a data breach or incident, report to senior management promptly, and take necessary actions.
• Facilitate the identification, investigation, management, and resolution of compliance-related issues.
• Prepare relevant compliance reporting to meet both internal and external regulatory requirements.
• Respond to Data Subject Rights Requests (DSRs) and establish policies and procedures for handling DSRs.
• This position may require occasional on-call support and will involve collaboration with various teams to ensure the effective management of data privacy and compliance initiatives.

Qualifications

• Bachelor’s degree in computer science, Information Technology, or a related field.
• 5+ years of experience working with the BigID platform or in a similar role.
• Demonstrable expertise in the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
• Proven experience working with data governance, privacy, and cybersecurity frameworks specific to the Saudi financial sector (e.g., SAMA’s Cyber Security Framework, IT Governance Framework).
• Strong understanding of privacy principles such as data minimization, purpose limitation, and accountability.
• Excellent communication, interpersonal, and leadership skills, with the ability to influence stakeholders at all levels.
• High level of integrity and professional ethics, with the ability to handle confidential information with discretion.