Director - Data Privacy

Tawuniya; Riyadh; On-site; SAR 300,000 - 520,000; Full time

Job summary

Tawuniya is seeking a Lead for Data Privacy to set the strategic direction of the organization’s data protection program and provide oversight to ensure compliance with privacy policies and regulations.

You will lead the development and continuous enhancement of privacy strategies, governance and risk management practices, while ensuring effective execution through the Data Privacy team and cross-functional collaboration.

Qualifications

• Bachelor’s degree in information technology, Law or related field.
• 5+ years of related experience in data privacy or protection.
• 10+ years total professional experience.
• Knowledge of privacy regulations and PDPL/GDPR.

Responsibilities

• Define and drive Tawuniya’s data protection strategy and priorities.
• Oversee privacy policies, procedures and governance.
• Oversee privacy compliance program and quarterly reporting.
• Manage communications with authorities and data subjects.
• Oversee DPIA processes and risk mitigation.
• Coordinate with procurement for third-party privacy compliance.
• Lead privacy training and awareness activities.
• Establish and maintain internal privacy audit program.
• Lead cross-functional privacy leadership across the organization.

Skills

Data protection

Regulatory compliance

Privacy management

Risk management

Data security

GDPR knowledge

PDPL knowledge

Privacy certifications

Education

Bachelor’s degree in information technology

Bachelor’s degree in Law

Bachelor’s degree in Business

Job description

Lead the Data Privacy function and team, setting the strategic direction for Tawuniya’s data protection program and providing organization-wide oversight to ensure compliance with applicable privacy policies and regulations. Drive the development and continuous enhancement of privacy strategies, governance and risk management practices, while ensuring effective execution through the Data Privacy team and cross-functional collaboration.

KEY ACCOUNTABILITIES & ACTIVITIES

Define and drive Tawuniya’s data protection strategy and strategic priorities in collaboration with cross-functional leadership, including Legal, and oversee the continuous enhancement of the Personal Data Protection program.

Lead and oversee the development, implementation, periodic review and continuous enhancement of Tawuniya’s privacy policies and procedures in accordance with applicable regulations and best practices.

3. Privacy Compliance Oversight & Executive Reporting

Provide oversight of Tawuniya’s privacy compliance program, ensuring compliance status, key risks and areas requiring attention are monitored and reported to top management on a quarterly basis.

4. Regulatory & Data Subject Oversight

Oversee and ensure effective management of communications and privacy matters involving relevant authorities and individuals whose personal data is processed, including the appropriate management of data subject rights and communications.

5. Data Protection Impact Assessment

Oversee the Data Protection Impact Assessment process and ensure appropriate guidance, monitoring and cross-functional collaboration are in place to address identified privacy risks, incidents or breaches.

Provide oversight of the identification and analysis of privacy risks across Tawuniya’s privacy ecosystem and ensure appropriate mitigation measures are established and monitored.

7. Third-Party Privacy Compliance

Oversee coordination with relevant business sectors, including Procurement, to ensure third parties and personal data processors adhere to applicable privacy regulations and requirements.

Provide direction and oversight for privacy training and awareness activities, ensuring employees understand their responsibilities and compliance requirements related to personal data processing and privacy risk mitigation.

9. Privacy Compliance & Enforcement

Oversee collaboration with Legal and HR to establish and maintain appropriate sanctions and measures for non-compliance with privacy policies.

10. Internal Privacy Audit & Assurance

Oversee the establishment and maintenance of the internal privacy audit program in coordination with Tawuniya’s Internal Audit function, ensuring adherence to applicable privacy standards and regulations.

11. Cross-Functional Leadership

Lead engagement with relevant business sectors and functions to ensure effective implementation of data protection requirements and alignment of privacy priorities across the organization.

Lead, develop and provide direction to the Data Privacy team, ensuring clear accountability, effective performance and appropriate allocation of responsibilities across the privacy function.

MAIN INTERACTIONS

Internal Stakeholders:

Top Management, Legal, HR, Procurement, Internal Audit, business sectors and other relevant functions.

External Stakeholders:

Relevant authorities, data subjects, third parties and personal data processors.

QUALIFICATIONS

Education:

Bachelor’s degree in information technology, Law, Business or a related field.

Knowledge & Experience

• 5+ years of related experience.
• 10+ years of total professional experience.
• Preferred experience in risk management or data security and protection.
• Preferred certifications in Privacy Management, such as CIPM, CIPP/E, or CIPT.
• Thorough knowledge of regulations and policies related to personal data protection.
• Sound knowledge of organizational administrative rules and procedures.
• Knowledge of information security and protection, including data classification and data privacy.
• Expertise in building, implementing and managing data protection programs.
• Expertise in national data protection requirements, including PDPL, and international data protection laws such as GDPR.