Data Privacy Specialist

Saudi Air Navigation Services - SANS; Saudi Arabia; On-site; SAR 180,000 - 240,000; Full time

Job summary

Saudi Air Navigation Services (SANS) is seeking a Data Privacy Specialist to oversee the company’s data privacy initiatives and ensure compliance with applicable laws. You will act as the point of contact for personal data protection, guide policies, monitor data processing activities, and coordinate with regulators and internal teams to manage incidents and audits.

The role requires deep knowledge of privacy regulations, risk assessment, and a proactive approach to training staff and promoting

Qualifications

• Minimum 6 years of data protection or compliance experience.
• Familiarity with personal data protection regulations and policies.
• Knowledge in information security and protection (classification, data privacy).
• In-depth knowledge of data protection laws and regulations.

Responsibilities

• Develop and maintain Personal Data Protection policies, procedures and processes.
• Serve as the point of contact with regulators for privacy-related matters.
• Oversee records of data processing activities and coordinate breach investigations.
• Ensure data protection controls in third-party contracts and vendor engagements.
• Review contracts and SLAs to align with privacy policies and procedures.
• Inform and train the organization on privacy law requirements.
• Conduct data protection impact assessments and risk assessments.
• Coordinate with Cybersecurity on privacy-related controls and incidents.

Skills

Data privacy

Compliance

Risk assessment

Data protection

Information security

Education

Bachelor's degree in Information Management/CS/Software Eng

Job description

Role Purpose

The Data Privacy Specialist is responsible for overseeing SANS s data privacy initiatives to ensure compliance with relevant laws and regulations They serve as the point of contact for personal data protection-related matters provide guidance on personal data protection policies and monitor data processing activities related to personal data within the set KPIs agreed budgets and adopted policies and procedures

Key Accountability Areas

Key Activities

• Develop and maintain the implementation of Personal Data Protection policies procedures and processes in alignment with the national Personal Data Protection laws and regulations
• Serve as the point of contact between SANS and the relevant regulator authorities for handling personal data privacy-related complaints and requests
• Oversee records of all personal data processing activities and coordinate the investigation of data breaches
• Coordinate with Cybersecurity on the relevant programs that implements controls to isolate detect and protect against the risks of personal data
• Ensure personal data protection controls are in place within all SANS third-party contracts and personal data protection controls are shared with external vendors
• Review and update the contracts and the service and operation level agreements in accordance with the privacy policies and procedures approved by SANS
• Ensures that processes around providing consumers with notices and consents are maintained and adhered to
• Review and handle data subjects requests related to the processing of their personal data
• Inform advise and train the organization and employees on their obligations under personal data protection law requirements
• Support with launching an awareness programs to promote a culture of privacy and to raise awareness pursuant to the privacy policies and procedures approved by SANS
• Work with Data Governance and Compliance Specialist to conduct compliance audits and recommend corrective actions when needed
• conduct impact assessment and risk assessments of the operation and use of its information systems containing personal data including the collection and processing of personal data and the storing and transmittal of personal data by each system - whether automated or manual
• conduct incident review and response to data breach formulating corrective actions in aligment with national regulations
• Promote effective collaboration and communication with internal team members and maintain cross-departmental alignment to ensure synergy and coherence

Policies Processes and Procedures

• Conduct day-to-day activities while ensuring compliance with policies and procedures
• Contribute to the identification of opportunities for continuous improvement of systems processes considering leading practices changes in the business environment cost reduction and productivity improvement

Knowledge and Experience

• Minimum of 6 years of relevant experience in data protection, privacy, or compliance roles.
• Experience in risks or data security and protection is preferred
• Familiarity with personal data protection regulations and policies
• Knowledge in information security and protection (classification, data privacy
• In-depth knowledge of data protection laws and regulations.

Education and Certifications

• Bachelor s degree in Information Management, Computer Science, Software Engineering or in related fields
• Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT) preferred.