Data Privacy & Compliance Specialist

Orient Insurance KSA; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

Orient Insurance KSA is seeking a data privacy professional to support the company’s privacy program and ensure compliance with the Saudi Personal Data Protection Law (PDPL) and applicable Insurance Authority requirements across insurance operations. Responsibilities include maintaining privacy policies and records, conducting DPIAs, coordinating data subject requests, and delivering privacy training.

Strong knowledge of PDPL and insurance processes is essential; bilingual Arabic/English

Qualifications

• Bachelor’s degree in Law, Information Systems, Cybersecurity, or a related discipline.
• Minimum 3 years of relevant experience in data privacy, data protection, or compliance, preferably in insurance or financial services.
• Sound knowledge of the Saudi PDPL and its implementing regulations.
• Understanding of insurance operations and sensitive personal data handling.
• CIPP/E, CIPM, CIPT, or equivalent certification is preferred.

Responsibilities

• Maintain privacy policies, procedures, notices, consent mechanisms, and records of personal data processing.
• Review personal data handling across underwriting, policy administration, claims, customer service, marketing, and HR.
• Maintain data inventories and flow maps, including sensitive health and claims information.
• Conduct privacy impact assessments for new products, systems, projects, and processing activities; monitor corrective actions.
• Coordinate data subject requests and privacy complaints within applicable timelines.
• Assess privacy risks relating to brokers, reinsurers, healthcare providers, third-party administrators, and other service providers.
• Review data processing agreements, data sharing arrangements, retention practices, and cross-border transfers with Legal and relevant departments.
• Support personal data breach investigations, documentation, escalation, and required notifications through authorized channels.
• Deliver privacy awareness training and prepare compliance reports and audit evidence.

Skills

Privacy risk assessment

Regulatory interpretation

Confidentiality

Analytical thinking

Attention to detail

Stakeholder coordination

Arabic & English comms

Education

Bachelor’s degree in Law/IS/Cybersecurity or related

Job description

Orient Insurance KSA is seeking a data privacy professional to support the company’s privacy program and ensure compliance with the Saudi Personal Data Protection Law (PDPL) and applicable Insurance Authority requirements across insurance operations. Responsibilities include maintaining privacy policies and records, conducting DPIAs, coordinating data subject requests, and delivering privacy training.

Strong knowledge of PDPL and insurance processes is essential; bilingual Arabic/English