Data Management Principal Analyst

aramco digital; Dammam; On-site; USD 60,000 - 90,000; Full time

Job summary

A leading company in Saudi Arabia is seeking a Privacy & Data Protection Specialist to enhance their data privacy practices. This role involves developing policies, conducting risk assessments, and ensuring compliance with evolving regulations. The ideal candidate should have significant experience in data privacy and relevant academic qualifications, and will contribute to fostering a culture of privacy within the organization.

Qualifications

• 5 years experience in data privacy or security roles.
• Certifications like CIPP, CIPM, or CIPT highly desirable.

Responsibilities

• Develop and implement data privacy policies and procedures.
• Conduct data privacy risk assessments and support compliance.
• Assist in enforcing data security measures.

Skills

Data Privacy

Risk Assessment

Data Security Implementation

Policy Development

Education

Bachelor’s or Master’s in Computer Science, IT, Cybersecurity

Job description

About the job

The Privacy & Data Protection Specialist is responsible for supporting and conducting data privacy risk assessments and assisting in identifying vulnerabilities and potential privacy risks. The role also assists in implementing data security measures to protect sensitive information and collaborates with stakeholders to develop and implement data privacy policies, standards, and procedures. The role assists in evaluating and assessing the data privacy practices of vendors and third-party service providers while staying informed about emerging trends, technologies, and changes in data privacy regulations.

Responsibilities:

• Develop and Implement Data Privacy Policies and Procedures: Collaborate with stakeholders to develop and implement data privacy policies, standards, and procedures. Ensure that these policies are based on relevant regulations and industry best practices. Assist in defining data classification and handling guidelines to protect sensitive information and ensure compliance.
• Support Compliance with Data Privacy Regulations: Stay updated with data privacy regulations such as NCA, GDPR, CCPA, and other applicable regional or industry-specific laws. Assist in conducting assessments to ensure compliance with data privacy requirements. Support the implementation of controls and measures to address identified compliance gaps and mitigate risks.
• Assist in Data Privacy Risk Assessments: Support in conducting data privacy risk assessments. Assist in identifying vulnerabilities and potential privacy risks. Collaborate with relevant teams to evaluate the effectiveness of existing controls and recommend enhancements to mitigate risks. Contribute to the development of risk mitigation strategies and action plans.
• Support Data Security and Protection Measures: Assist in implementing data security measures to protect sensitive information. Contribute to the enforcement of data encryption, access controls, data masking, and other security techniques. Collaborate with IT teams to ensure the implementation of robust security controls and technologies.
• Assist in Driving Data Privacy Training and Awareness: Support the development and delivery of data privacy training programs. Assist in raising awareness about data privacy responsibilities and promoting a culture of privacy within the organization. Provide support to employees on data privacy-related queries and concerns.
• Support Vendor Relationships and Third-Party Risk Management: Assist in evaluating and assessing the data privacy practices of vendors and third-party service providers. Contribute to the establishment of contractual requirements and clauses related to data privacy and security. Support the monitoring and management of third-party risks to ensure compliance with data privacy regulations.
• Stay Updated and Contribute to Continuous Improvement: Stay informed about emerging trends, technologies, and changes in data privacy regulations. Contribute to the assessment and enhancement of data privacy practices based on industry best practices and evolving requirements. Support the identification of opportunities to enhance data privacy and protection measures.
• Collaborate with Product Teams for Privacy-by-Design: Work closely with product development teams to embed privacy-by-design principles into the development lifecycle. Provide guidance on privacy impact assessments, data anonymization, pseudonymization, and other privacy-enhancing technologies. Ensure that data privacy considerations are integrated into the design and functionality of technology and SaaS products.

Minimum qualifications:

• Bachelor’s or master’s degree in computer science, information technology, cybersecurity, or a related field required.
• At least 5 years of experience in working in data privacy, security, or related roles, preferably with exposure to data privacy risk assessments, data security implementation, and policy development with 2- 3 years in a regional company with experience in evaluating the effectiveness of existing data privacy controls and recommending risk mitigation strategies. Professional certifications related to data privacy and protection, such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT), are highly desirable.