DPO: Privacy & Data Protection Lead (Saudi PDPL)

Salla; Jeddah; On-site; SAR 350,000 - 550,000; Full time

Job summary

Salla in Jeddah seeks an experienced Data Protection Officer to lead PayLink's data privacy program, ensuring compliance with Saudi PDPL and SAMA requirements while advising on privacy risks across the business. You will develop and maintain the privacy framework and oversee DPIAs/PIAs across products and services.

The role requires coordinating with Legal, Compliance, Cybersecurity, IT and product teams to embed privacy by design and respond to data subject rights and incidents effectively.

Qualifications

• Bachelor’s degree in law, information security, compliance, or related field.
• Professional privacy certifications such as CIPP/E, CIPM, CIPP A preferred.
• Hands-on experience in data protection, privacy compliance or regulatory compliance.
• Strong knowledge of Saudi PDPL and implementing regulations.
• Experience with PDPL and SAMA requirements for financial institutions.

Responsibilities

• Develop and maintain the data protection framework in line with PDPL and SAMA requirements.
• Lead Privacy Impact Assessments (PIAs) and DPIAs for new products and processes.
• Manage Data Subject Rights requests and privacy incidents coordination.
• Provide privacy training and engage stakeholders across Legal, Compliance, IT, and product teams.

Skills

Privacy governance

Regulatory compliance

Stakeholder management

Privacy by Design

PIA & DPIA

Education

Bachelor's degree in Law / Information Security / Compliance / IT

CIPP/E CIPM CIPP A certifications

Job description

Salla in Jeddah seeks an experienced Data Protection Officer to lead PayLink's data privacy program, ensuring compliance with Saudi PDPL and SAMA requirements while advising on privacy risks across the business. You will develop and maintain the privacy framework and oversee DPIAs/PIAs across products and services.

The role requires coordinating with Legal, Compliance, Cybersecurity, IT and product teams to embed privacy by design and respond to data subject rights and incidents effectively.