Data Privacy Consultant

T&S; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

T&S seeks an experienced Data Privacy Consultant to support privacy compliance engagements across government and private sectors in Saudi Arabia. You will apply your knowledge of PDPL, SDAIA, and NDI standards to translate legal requirements into practical controls and program rollout.

You will conduct PDPL gap assessments, develop privacy policies and data handling frameworks, perform RoPA and DPIAs, and implement privacy tools such as OneTrust, Securiti, BigID, and Microsoft Purview.

Qualifications

• Bachelor's degree in a relevant field required.
• 2–5 years in data privacy or privacy compliance.
• Hands-on with privacy tech platforms.
• Experience with PDPL and regulations.
• Strong English and Arabic communication.

Responsibilities

• Conduct PDPL gap assessments and privacy maturity assessments for government and private sector clients, and develop remediation roadmaps.
• Interpret the PDPL and its Implementing Regulations, translating requirements into policies, procedures, and controls.
• Develop privacy governance artefacts, including policies, notices, consent frameworks, data retention schedules, and DPAs.
• Perform personal data discovery, data mapping, and RoPA.
• Design and operationalize Data Subject Rights (DSR) intake, verification, fulfilment, and tracking workflows.
• Conduct DPIAs and privacy risk assessments for new and existing processing activities.
• Configure data classification, sensitivity labelling, and DLP policies.
• Develop breach management and notification procedures aligned with SDAIA requirements.
• Align client privacy programmes with SDAIA, NDMO, and NDI requirements.
• Apply knowledge of privacy tools to support compliance.
• Deliver privacy awareness sessions and workshops with stakeholders.
• Contribute to proposals and practice growth in data privacy.

Skills

Data privacy

PDPL knowledge

Privacy governance

Policy development

Data mapping

RoPA

DPIA

Stakeholder management

English

Arabic

Education

Bachelor's Degree in Law/CS/IT

Tools

OneTrust

Securiti

BigID

Microsoft Purview

Informatica

Job description

We are currently seeking an experienced Data Privacy Consultant to support our personal data protection and privacy compliance engagements. The ideal candidate combines a strong understanding of personal data protection law with hands‑on experience implementing privacy technology platforms, and is able to deliver end‑to‑end privacy programmes — from regulatory gap assessments and policy development through tool configuration and operational rollout. You will work with government and private sector clients to ensure compliance with the Personal Data Protection Law (PDPL), SDAIA regulations, and NDMO standards, translating legal requirements into practical controls and processes.

Responsibilities:

• Conduct PDPL gap assessments and privacy maturity assessments for government and private sector clients, and develop remediation roadmaps.


• Interpret the Personal Data Protection Law (PDPL) and its Implementing Regulations, and translate legal requirements into practical policies, procedures, and controls.


• Develop privacy governance artefacts, including privacy policies, privacy notices, consent frameworks, data retention schedules, and data processing agreements.


• Perform personal data discovery, data mapping, and Records of Processing Activities (RoPA).


• Design and operationalize Data Subject Rights (DSR) request handling, including intake, identity verification, fulfilment, and tracking workflows.


• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new and existing processing activities, systems, and projects.


• Configure data classification, sensitivity labelling, and data loss prevention (DLP) policies to protect personal and sensitive data.


• Develop personal data breach management and notification procedures aligned with SDAIA requirements.


• Align client privacy programmes with SDAIA regulations, NDMO personal data protection standards, and National Data Index (NDI) requirements.


• Apply knowledge of privacy tools such as OneTrust, Securiti, BigID, Microsoft Purview, and Informatica to support privacy compliance.


• Deliver privacy awareness sessions and training, and run workshops with legal, compliance, IT, and business stakeholders.


• Contribute to proposals, solution design, business development, and practice growth in data privacy and protection.

Requirements:

• Bachelor's Degree in Law, Computer Science, Information Technology, or a related field.


• 2–5 years of experience in data privacy, data protection, or privacy compliance, with strong knowledge of the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.


• Hands‑on experience implementing privacy management platforms such as OneTrust, Securiti, BigID, Microsoft Purview, or Informatica.


• Proven experience delivering privacy engagements across both government and private sectors.


• Strong communication and stakeholder management skills in English and Arabic.

Preferred:

• Knowledge of international data protection laws, such as the EU General Data Protection Regulation (GDPR), is a plus.


• Familiarity with NDMO standards, the National Data Index (NDI), and SDAIA regulatory guidance.


• Experience in information security, data classification, and data governance practices.

Preferred Certificates:

• IAPP certification such as CIPP/E, CIPM, or CIPT.


• Platform certifications in OneTrust, Securiti, BigID, Microsoft Purview, or Informatica.