Data Protection Officer (DPO)

Cenomi Centers; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

Cenomi Centers is seeking a senior Data Protection Officer to lead and oversee its PDPL compliance program across the organization in Saudi Arabia. You will drive DPIAs, ROPAs, and data protection policy implementation while coordinating with SDAIA and key stakeholders.

You will advise on data subject rights, privacy risk assessments, and breach response, ensuring continuous alignment with PDPL requirements and industry best practices.

Qualifications

• Bachelor's degree in Law, Information Systems, Cybersecurity, Information Technology, or related field.
• 5+ years of relevant experience, including privacy/compliance.
• Knowledge of Saudi PDPL, Implementing Regulations, and SDAIA requirements.
• Hands-on experience with DPIA, ROPA, and privacy risk assessments.
• Strong communication and stakeholder management skills.

Responsibilities

• Oversee PDPL compliance across all business functions.
• Maintain ROPA and oversee DPIA initiatives.
• Monitor personal data processing, sharing, retention, and protection practices.
• Advise on data subject rights, third-party processing, and breaches.
• Coordinate with SDAIA and internal stakeholders.
• Develop and monitor data protection policies, procedures, and training.
• Provide independent professional advice and escalate data protection risks.
• Perform additional PDPL-related tasks as needed.

Skills

Communication skills

Stakeholder management

Education

Bachelor's degree in related field

CIPP/CIPM/CIPT or equivalent certifications

Tools

ISO/IEC 27701

ISO/IEC 27001

Job description

To lead and oversee Cenomi Centers’ personal data protection compliance program, ensuring compliance with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and applicable SDAIA requirements.

Role Responsibilities :

1. Oversee PDPL compliance across all business functions.
2. Maintain Records of Processing Activities (ROPA) and oversee Data Protection Impact Assessments (DPIA).
3. Monitor personal data processing, sharing, retention, and protection practices.
4. Advise on data subject rights, third-party data processing arrangements, and personal data breaches.
5. Coordinate with SDAIA and relevant internal stakeholders.
6. Develop and monitor data protection policies, procedures, awareness and training programs, and compliance reporting.
7. Provide independent professional advice and escalates material data protection risks to the appropriate management level.
8. Perform added roles and tasks as per management needs.

Role Requirements :

• Bachelor's degree in Law, Information Systems, Cybersecurity, Information Technology, or a related field.
• Minimum 5 years of relevant professional experience, including at least 2 years in personal data protection or privacy compliance.
• Practical knowledge of Saudi PDPL, its Implementing Regulations, and SDAIA requirements.
• Hands-on experience with ROPA, DPIA, personal data breach management, and privacy risk assessments.
• Strong communication and stakeholder management skills.
• Proficiency in Arabic and English.
• Professional data privacy certifications such as CIPP, CIPM, CIPT, or equivalent.
• Previous experience serving as a DPO or implementing an organization-wide PDPL compliance program.
• Familiarity with ISO/IEC 27701 and ISO/IEC 27001