PDPL MANAGER - BANKING - NDMO, SAMA

Duncan & Ross; Riyadh; On-site; SAR 200,000 - 250,000; Full time

Job summary

A financial institution in Riyadh is seeking a PDPL Manager to lead data privacy and compliance initiatives. This role includes overseeing the development of privacy policies, conducting audits, and engaging with stakeholders ensuring regulatory alignment. Candidates should have over 10 years of relevant experience in data privacy and banking, with necessary certifications like PMP or Prince2. Strong leadership and communication skills are essential.

Qualifications

• 10+ years of experience in data privacy, regulatory compliance, or information governance.
• Extensive banking industry experience is mandatory.
• Proven knowledge of NDMO, PDPL, and SAMA data protection requirements.
• Demonstrated hands-on experience with data protection laws and frameworks.

Responsibilities

• Lead PDPL and NDMO compliance programs.
• Oversee development and maintenance of data protection policies.
• Act as primary contact for PDPL matters.
• Conduct privacy impact assessments and compliance audits.
• Deliver data privacy training and awareness initiatives.

Skills

Data privacy management

Regulatory compliance

Stakeholder management

Leadership

Communication

Education

Certifications: PMP or Prince2

Privacy certifications (CIPP or CIPM)

Job description

Role Summary

The PDPL Manager will lead the banks Data Privacy and PDPL compliance initiatives in alignment with NDMO, SAMA, and internal governance requirements. This role will oversee privacy program development, policy enforcement, operational readiness, and risk mitigation efforts across the organization.

Key Responsibilities

• Lead enterprise-wide PDPL and NDMO compliance programs, ensuring alignment with applicable banking regulations.
• Oversee the development, implementation, and maintenance of data protection policies, standards, and procedures.
• Act as the primary point of contact for PDPL matters, regulatory engagements, and internal stakeholders.
• Guide and review the creation of Records of Processing Activities (ROPAs).
• Conduct privacy impact assessments, risk assessments, and compliance audits.
• Coordinate with technology, legal, risk, cybersecurity, and business teams to ensure integrated compliance.
• Deliver training, awareness, and change-management initiatives related to data privacy.
• Support governance reporting, dashboards, and KPIs related to data protection performance.

Required Qualifications and Experience

• 10+ years of experience in data privacy, regulatory compliance, or information governance.
• Extensive banking industry experience is mandatory.
• Proven knowledge of NDMO, PDPL, and SAMA data protection requirements.
• Certifications: PMP or Prince2 (mandatory); additional privacy certifications such as CIPP or CIPM are preferred.
• Demonstrated hands‑on experience with data protection laws, frameworks, and operational rollouts.
• Strong leadership, stakeholder management, and communication skills.

Vertical: Technology