Saudi PDPL DPO | Privacy & Data Protection Lead for FinTech

Salla; Al Khobar; On-site; SAR 240,000 - 420,000; Full time

Job summary

PayLink seeks an experienced Data Protection Officer to lead the data privacy program, ensuring compliance with Saudi PDPL, implementing PIAs, and advising on regulatory obligations. The role requires collaboration with Legal, IT, Security, and Product teams to strengthen privacy controls and governance.

The DPO will oversee DSAR processes, privacy risk management, and privacy incident response, while promoting Privacy by Design and by Default across business processes.

Qualifications

• Bachelor's degree in Law, Information Security, Cybersecurity, Compliance, Information Technology or related field.
• Privacy certifications such as CIPP/E, CIPM, CIPP/A preferred.
• Hands-on experience with Data Protection, Privacy Compliance or Regulatory Compliance.

Responsibilities

• Develop and maintain privacy framework per PDPL and SAMA requirements.
• Monitor regulatory developments and ensure ongoing compliance with data protection laws.
• Serve as primary contact for regulators on data protection matters.
• Advise management on privacy risks, obligations, and controls.
• Conduct Privacy Impact Assessments (PIAs/DPIAs) and manage privacy risk assessments.
• Lead Data Subject Rights processes and privacy incident response.
• Deliver privacy training and engage stakeholders across Legal, IT, Cybersecurity and Product teams.

Skills

Data Protection

Privacy Compliance

Stakeholder management

Education

Bachelor's degree in Law, Information Security, Cybersecurity, Compliance, Information Technology

Tools

CIPP/E

CIPM

CIPP/A

Job description

PayLink seeks an experienced Data Protection Officer to lead the data privacy program, ensuring compliance with Saudi PDPL, implementing PIAs, and advising on regulatory obligations. The role requires collaboration with Legal, IT, Security, and Product teams to strengthen privacy controls and governance.

The DPO will oversee DSAR processes, privacy risk management, and privacy incident response, while promoting Privacy by Design and by Default across business processes.