Cybersecurity Compliance Engineer

Taj HR; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading HR consultancy in Saudi Arabia seeks a candidate for a role focused on data protection compliance. Responsibilities include serving as the contact for PDPL compliance, maintaining data processing records, supporting privacy assessments, and coordinating with auditors. Candidates should possess knowledge of networking, information security principles, and cloud security fundamentals. Competitive compensation and professional development opportunities are available.

Responsibilities

• Serve as the local point of contact for data protection and PDPL compliance.
• Maintain data processing records (ROPA) and ensure lawful processing practices.
• Support privacy impact assessments (DPIA).
• Assist in developing and maintaining privacy notices and consent management mechanisms.
• Report to management and coordinate with external auditors on compliance checks.

Skills

Basic understanding of networking concepts (TCP / IP, firewalls, VPNs)

Familiarity with information security principles (CIA triad, access control, encryption)

Knowledge of cloud security fundamentals (AWS / Azure / Google Cloud)

Exposure to ISO 27001, NCA-ECC, or PDPL frameworks

Basic understanding of data protection & privacy laws

Understanding of email security, phishing awareness, and password management tools

Job description

Key Responsibilities

• Serve as the local point of contact for data protection and PDPL compliance.
• Maintain data processing records (ROPA) and ensure lawful processing practices.
• Support privacy impact assessments (DPIA).
• Assist in developing and maintaining privacy notices and consent management mechanisms.
• Report to management and coordinate with external auditors on compliance checks.

Skills

• Basic understanding of networking concepts (TCP / IP, firewalls, VPNs)
• Familiarity with information security principles (CIA triad, access control, encryption)
• Knowledge of cloud security fundamentals (AWS / Azure / Google Cloud)
• Exposure to ISO 27001, NCA-ECC, or PDPL frameworks (preferred)
• Basic understanding of data protection & privacy laws
• Understanding of email security, phishing awareness, and password management tools