Data Privacy & Protection Program Lead

EJADA; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

EJADA in Riyadh is seeking an experienced Data Protection Consultant to advance our privacy program. The role focuses on ensuring regulatory compliance, conducting privacy assessments, and implementing governance frameworks across the organization.

The ideal candidate will have 6+ years in data protection, strong knowledge of GDPR/CCPA and Saudi privacy considerations, and demonstrated ability to lead privacy initiatives with IT, security, and legal teams.

Qualifications

• Must have strong knowledge of data protection laws and governance
• Experience with privacy risk assessments and control design
• Proven ability to manage privacy programs and cross‑functional collaboration

Responsibilities

• Develop, implement, and maintain data protection and privacy frameworks across the organization
• Ensure compliance with data protection regulations and industry standards
• Conduct PIAs and DPIAs
• Identify and mitigate privacy risks across processes, systems, and projects
• Review processes to apply privacy-by-design principles
• Support data classification, retention, and handling initiatives
• Develop privacy policies and governance documentation
• Collaborate with legal, IT, and security teams on privacy initiatives
• Handle data subject requests and privacy inquiries
• Deliver privacy awareness trainings and awareness sessions
• Monitor regulatory changes and advise on compliant practices
• Support audits and regulatory reviews

Skills

Privacy governance

Regulatory compliance

Risk assessment

Stakeholder management

PIA/DPIA

Education

Bachelor's degree in Data Privacy, Information Security, Cybersecurity, IT, Law, or related field

CIPP / CIPM / CDPSE / ISO 27701 certifications

Job description

EJADA in Riyadh is seeking an experienced Data Protection Consultant to advance our privacy program. The role focuses on ensuring regulatory compliance, conducting privacy assessments, and implementing governance frameworks across the organization.

The ideal candidate will have 6+ years in data protection, strong knowledge of GDPR/CCPA and Saudi privacy considerations, and demonstrated ability to lead privacy initiatives with IT, security, and legal teams.