Cybersecurity Data Protection Specialist

ASMO; Saudi Arabia; On-site; SAR 180,000 - 300,000; Full time

Job summary

ASMO is seeking a Cybersecurity Data Protection Specialist to establish and continuously improve data protection controls across the organization. The role focuses on confidentiality, integrity, privacy, and regulatory compliance throughout data lifecycle.

You will support data governance, data classification, DLP, encryption, and information handling, while maintaining policies and producing risk reports for management.

Qualifications

• Bachelor's degree in information technology or equivalent from a recognized university.
• Relevant certifications (CDPSE, CIPP, CIPM, CISSP, CISM, ISO 27001 Lead Implementer/Auditor) preferred.
• Minimum 7 years of experience in cybersecurity/data protection or related field.
• Knowledge of DLP, encryption, key management, data discovery, data classification and access controls.

Responsibilities

• Establish, implement, monitor and continuously improve data protection controls.
• Develop and maintain data classification standards and support classification activities.
• Monitor DLP alerts, incidents, and control effectiveness.
• Conduct assessments to evaluate data protection compliance and governance.
• Support privacy regulations, data retention and secure disposal requirements.

Skills

Data protection

English proficiency

Regulatory compliance

Data governance

Risk reporting

Education

Bachelor's degree in IT

Tools

CDPSE

CIPP

CIPM

CISSP

CISM

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

ASMO is a groundbreaking joint venture between DHL and Saudi Aramco. Inheriting DHL's logistics excellence and Saudi Aramco's extensive supply chain ecosystem, we are here to set a new benchmark and redefine the procurement and supply chain landscape, enabling growth.

ASMO aims to be operational in 2025 and provide reliable end-to-end integrated procurement and supply chain services for companies across the industrial, energy, chemical, and petrochemical sectors. Our focus customers in the short term will be Saudi Aramco and its Affiliates. In the long term, all the industrial sectors within Saudi Arabia aim to reach the MENA region.

Objective

The Cybersecurity Data Protection Specialist is responsible for establishing, implementing, monitoring, and continuously improving data protection controls and practices across the ASMO. The role ensures confidentiality, integrity, availability, privacy, and regulatory compliance of organizational data throughout its lifecycle. The position supports data governance, data classification, data loss prevention (DLP), encryption, privacy compliance, information handling, and data protection initiatives.

General Responsibilities

• Support the implementation and maintenance of enterprise data protection controls and processes.
• Develop and maintain data classification standards and facilitate data classification activities.
• Monitor, analyze, and manage DLP alerts, incidents, and control effectiveness.
• Conduct assessments to evaluate data protection compliance and control effectiveness.
• Support data retention, archival, secure disposal, and information handling requirements.
• Support compliance with applicable privacy regulations and data protection obligations.
• Maintain and enhance data protection policies, standards, procedures, and guidelines.
• Prepare data protection metrics, dashboards, risk reports, and management updates.
• Promote awareness of data protection requirements and secure information handling practices.

Qualifications

• Bachelor's degree in information technology, or equivalent from a recognized and accredited university is required.
• CDPSE, CIPP, CIPM, CISSP, CISM, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent.
• Minimum 7 years experience in similar or related field.
• Experience in Information Technology / Data Solutions / Networking / Cybersecurity preferred.
• Knowledge of DLP technologies, encryption, key management, data discovery, data classification, access controls, cloud data protection, and information governance solutions.
• Demonstrated proficiency in oral and written English.

Deadline: 30 days from posting.