Senior Privacy & Data Governance Strategist

Elm Company; Riyadh; On-site; SAR 350,000 - 520,000; Full time

Job summary

Elm Company in Riyadh seeks a Senior Principal to lead advanced privacy and data governance across the organization. You will develop and implement governance frameworks, manage DPIAs, RoPA, data lifecycle controls, and support regulatory compliance with government standards.

You will mentor teams, advise stakeholders, and monitor maturity and KPIs, driving improvements in privacy posture and data governance across data models, sharing, and architecture.

Qualifications

• Bachelor’s degree in Law, Information Systems, Computer Science, Data Management, or a related field.
• Master’s degree preferred.
• Professional certifications in Privacy, Data Governance, Data Management, or related disciplines are considered an advantage.

Responsibilities

• Provide expert guidance on privacy requirements including consent management, privacy notices, RoPA, and data subject requests.
• Develop and enhance privacy and data governance frameworks, policies, standards, and procedures.
• Assess complex governance requirements and recommend appropriate controls and implementation approaches.
• Support regulatory compliance across applicable regulations and internal policies.
• Advise stakeholders on complex privacy risks and mitigation measures.
• Collaborate with Data Owners, Business Data Stewards, and Technology stakeholders to implement governance requirements.

Skills

Privacy expertise

Data governance

Regulatory compliance

Stakeholder advisory

Education

Bachelor’s degree in Law, Information Systems, Computer Science, Data Management, or related field

Master’s degree preferred

Job description

Elm Company in Riyadh seeks a Senior Principal to lead advanced privacy and data governance across the organization. You will develop and implement governance frameworks, manage DPIAs, RoPA, data lifecycle controls, and support regulatory compliance with government standards.

You will mentor teams, advise stakeholders, and monitor maturity and KPIs, driving improvements in privacy posture and data governance across data models, sharing, and architecture.