Saudi Data Protection Officer (DPO)

CYBER سايبر; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading cybersecurity consultancy in Saudi Arabia is seeking a Data Protection Officer (DPO) to ensure compliance with the Personal Data Protection Law (PDPL). The role involves governance for data protection across operations and engagements, requiring strong expertise in compliance, risk evaluation, and relevant legislation, offering competitive compensation and opportunities for professional growth.

Benefits

Competitive compensation linked to experience and performance

Continuous learning and development opportunities

Collaborative work environment

Involvement in national-level strategic projects

Qualifications

• Saudi National required.
• 2-5 years of experience in data protection or privacy governance.
• Professional certifications such as CIPM, CIPP, CDPO, or ISO 27701 preferred.

Responsibilities

• Act as subject matter expert for PDPL compliance.
• Monitor compliance activities and conduct audits.
• Handle data subject inquiries and ensure rights are upheld.

Skills

Analytical skills

Risk evaluation

Communication

Confidentiality

Education

Bachelor's degree in Law, Information Security, or related field

Job description

Saudi Data Protection Officer (DPO)

Riyadh, Saudi Arabia

Full-time | On-site

Cybersecurity & Compliance Department

Company: CYBER – A National Leader in Cybersecurity Advisory & Compliance

Reporting to: Chief Cybersecurity Officer (CISO)

About CYBER:

CYBER is a Saudi cybersecurity consulting firm trusted by national entities and critical infrastructure sectors. We partner with government and private sector organizations to drive compliance with national cybersecurity mandates, data protection frameworks, and secure digital transformation.

Role Overview:

We are looking for a Saudi National to serve as the Data Protection Officer (DPO), aligned with the legal requirements of the Saudi Personal Data Protection Law (PDPL). The selected candidate will lead compliance governance for internal operations and client engagements, working closely with cross-functional teams and regulatory bodies.

This role is vital to maintaining data protection integrity across CYBER’s service portfolio and will contribute directly to national data protection objectives.

Key Responsibilities:

• Act as the subject matter expert for PDPL compliance within CYBER and for client support engagements.
• Monitor internal and client-related compliance activities and conduct audits where necessary.
• Serve as the official liaison with the Saudi Data & Artificial Intelligence Authority (SDAIA) or other supervisory bodies.
• Handle data subject inquiries and ensure rights are upheld under applicable laws.
• Lead data breach response planning and assist in incident investigations.
• Deliver internal and external training on data protection awareness and legal obligations.
• Support executive management in compliance risk assessment and reporting.
• Coordinate with Cybersecurity, Legal, Risk, and Project teams to ensure integrated governance.

Qualifications:

• Saudi National (required in compliance with Saudi regulations for DPO designation under PDPL).
• 2–5 years of experience in data protection, legal compliance, or privacy governance.
• Bachelor's degree in Law, Information Security, or a related field.
• Professional certifications such as CIPM, CIPP, CDPO, or ISO 27701 are preferred.
• Strong familiarity with NCA frameworks and national cybersecurity regulations.

Skills & Attributes:

• Excellent analytical and risk evaluation skills.
• Strong written and verbal communication skills in both Arabic and English.
• High integrity, confidentiality, and professional accountability.
• Comfortable interacting with senior leadership and external regulators.

What We Offer:

• Competitive compensation linked to experience and performance.
• Continuous learning, certifications, and development pathways.
• A collaborative and mission-driven work environment.
• Opportunities to work on national-level strategic projects.