The Data Protection Officer (DPO) will be responsible for implementing data Protection policies and procedures to ensure the effective use of the SPL data assets. This role requires a deep understanding of data management, privacy, and regulatory compliance. The ideal candidate will work closely with various departments to establish and maintain a robust data Protection framework that supports business objectives. The ideal candidate must have strong knowledge of the General Data Authority (GDA), National Data Protection Policies, SDAIA (Saudi Data and Artificial Intelligence Authority), Personal Data Protection Law (PDPL), National Data Protection Framework, Data Classification Policy and Regulations, and the Regulation on Personal Data Transfer Outside the Kingdom.
Key Responsibilities:
- Data Protection Framework:
- Implement a comprehensive data protection framework, including policies, procedures, and standards.
- Establish data protection roles and responsibilities across the SPL.
- Ensure alignment of data protection initiatives with business goals and objectives.
- Monitor data quality issues and work with data owners and the Data Integrity Analyst to resolve them.
- Develop and maintain data protection dashboards and reports.
- Data Privacy:
- Ensure compliance with data privacy regulations and industry standards.
- Implement data privacy policies and procedures.
- Conduct regular data privacy audits and assessments.
- Ensure compliance with Data guidelines and Saudi data regulations, including the PDPL, National Data Protection Framework, Data Classification Policy and Regulations, and the Regulation on Personal Data Transfer Outside the Kingdom.
- Data Stewardship:
- Identify and appoint data stewards for key data domains.
- Provide training and support to data stewards to ensure effective data management.
- Facilitate regular data stewardship meetings to address data Protection issues.
- Data Catalogue and Metadata Management:
- Develop and maintain a data catalogue to document data assets and metadata.
- Implement metadata management tools and processes to ensure data lineage and traceability.
- Ensure the data catalogue is regularly updated and accessible to relevant stakeholders.
- Establish and lead a data Protection committee to oversee data Protection initiatives.
- Facilitate regular committee meetings to review data Protection policies and address issues.
- Provide regular updates to senior management on data Protection activities and progress.
- Collaboration and Communication:
- Work closely with legal, governance, and business units to ensure data Protection policies are implemented effectively.
- Communicate Data Protection policies and procedures to all relevant stakeholders.
- Provide training and awareness programs on data Protection and data privacy.
- Stay updated with the latest data protection best practices and regulatory requirements.
- Continuously evaluate and improve data Protection policies and procedures.
- Participate in data Protection forums and industry groups to share knowledge and learn from peers.
Education & Experience:
- Bachelor's degree in Computer Science or a related field.
- Minimum of 5 years of experience in Data protection, data management, or a related role.
- Strong knowledge of data protection frameworks, data quality management, and data privacy regulations.
- Strong knowledge of SDAIA, GDA guidelines, and Saudi data regulations, including the PDPL, National Data Protection Framework, Data Classification Policy and Regulations, and the Regulation on Personal Data Transfer Outside the Kingdom.
- Excellent problem-solving and analytical abilities.
- Strong communication and interpersonal skills.
- Ability to work effectively in a team environment.
Preferred Certifications:
- Certified Data Management Professional (CDMP)
- Certified Information Privacy Professional (CIPP)
- Data Protection and Stewardship Professional (DGSP)
- Certified Information Systems Auditor (CISA)
Knowledge & Skills:
- Ability to build relationships based on transparency.
- Adopt, Apply and promote the SPL culture and values
(Performance - Ambition - Protection Professionalism). - Ability to transfer confidence to team members.
- Ability to transfer knowledge and experience to team members.