Data Protection Officer (DPO)

Salla; Jeddah; On-site; SAR 350,000 - 550,000; Full time

Job summary

Salla in Jeddah seeks an experienced Data Protection Officer to lead PayLink's data privacy program, ensuring compliance with Saudi PDPL and SAMA requirements while advising on privacy risks across the business. You will develop and maintain the privacy framework and oversee DPIAs/PIAs across products and services.

The role requires coordinating with Legal, Compliance, Cybersecurity, IT and product teams to embed privacy by design and respond to data subject rights and incidents effectively.

Qualifications

• Bachelor’s degree in law, information security, compliance, or related field.
• Professional privacy certifications such as CIPP/E, CIPM, CIPP A preferred.
• Hands-on experience in data protection, privacy compliance or regulatory compliance.
• Strong knowledge of Saudi PDPL and implementing regulations.
• Experience with PDPL and SAMA requirements for financial institutions.

Responsibilities

• Develop and maintain the data protection framework in line with PDPL and SAMA requirements.
• Lead Privacy Impact Assessments (PIAs) and DPIAs for new products and processes.
• Manage Data Subject Rights requests and privacy incidents coordination.
• Provide privacy training and engage stakeholders across Legal, Compliance, IT, and product teams.

Skills

Privacy governance

Regulatory compliance

Stakeholder management

Privacy by Design

PIA & DPIA

Education

Bachelor's degree in Law / Information Security / Compliance / IT

CIPP/E CIPM CIPP A certifications

Job description

Job Summary

We are seeking an experienced Data Protection Officer DPO to lead and oversee PayLink s data privacy and protection framework ensuring compliance with Saudi Arabia s Personal Data Protection Law PDPL its Implementing Regulations and applicable regulatory requirements The ideal candidate will have hands-on experience implementing data protection programs conducting Privacy Impact Assessments PIAs DPIAs managing privacy risks and advising stakeholders on data protection obligations preferably within FinTech banking payments or other regulated financial services environments

Key Responsibilities

• Data Protection amp Regulatory ComplianceDevelop implement and maintain the organization s data protection and privacy compliance framework in accordance with Saudi PDPL its Implementing Regulations and applicable SAMA requirements Monitor regulatory developments and ensure ongoing compliance with applicable data protection laws and standards Serve as the primary point of contact for relevant regulatory authorities on data protection matters Advise senior management on privacy risks regulatory obligations and compliance improvements


• Privacy Governance amp Risk ManagementDevelop review and maintain privacy policies procedures data retention schedules and internal guidelines Conduct and oversee Privacy Impact Assessments PIAs DPIAs for new products systems and business processes Identify assess and mitigate privacy risks associated with personal data processing third-party vendors and cross-border data transfers Embed Privacy by Design and Privacy by Default principles into business operations


• Data Subject Rights amp Incident ManagementEstablish and manage processes for handling Data Subject Access Requests DSARs and other rights under Saudi PDPL Establish and manage processes for handling Data Subject Access Requests DSARs and other data subject rights under Saudi PDPL in coordination with Information Security Legal and IT teams to ensure timely and compliant responses Monitor compliance with data protection requirements and maintain appropriate documentation and audit evidence


• Training amp Stakeholder EngagementDevelop and deliver employee privacy awareness and data protection training programs Collaborate with Legal Compliance Cybersecurity IT Product and business teams to ensure effective privacy controls

Requirements

• Bachelor s degree in Law Information Security Cybersecurity Compliance Information Technology or a related field


• Professional privacy certifications such as CIPP E CIPM CIPP A are preferred


• Demonstrated hands-on experience in Data Protection Data Privacy Privacy Compliance or Regulatory Compliance


• Strong knowledge of Saudi Personal Data Protection Law PDPL and its Implementing Regulations


• Understanding of SAMA regulatory requirements and their application to financial institutions payment service providers or FinTech companies


• Proven experience developing and implementing privacy policies data protection frameworks and compliance procedures


• Practical experience conducting Privacy Impact Assessments PIAs DPIAs privacy risk assessments and maintaining Records of Processing Activities RoPA


• Experience managing Data Subject Rights Requests DSARs personal data breaches and privacy incident response


• Ability to collaborate with cross-functional teams and communicate regulatory requirements to technical and non-technical stakeholders


• Strong analytical documentation communication and stakeholder management skills


• Professional proficiency in English Arabic proficiency is highly preferred