Data Privacy and Protection Expert

About the role

We are seeking a senior Data Privacy and Protection Expert to lead and operationalise privacy programmes in Riyadh. The role focuses on implementing Saudi PDPL requirements across a large, complex organisation.

Key responsibilities

• Handle Data Subject Requests (DSRs) and maintain Records of Processing Activities (RoPA).
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Review, update and enhance privacy policies, procedures, templates and operational documentation.
• Collaborate with business, legal, compliance, technology and data teams to embed privacy requirements.
• Explain privacy concepts to non‑technical stakeholders and support awareness initiatives.

Required profile

• 8+ years of experience in data privacy, protection, compliance or governance.
• Strong knowledge of Saudi PDPL, its regulations and related guidance.
• Proven experience supporting privacy programmes in large organisations.
• Bachelor’s degree in Law, Information Systems, Cybersecurity, Business Administration or related field; Master’s preferred.
• Relevant certifications (e.g., CIPP/E, CIPM, CIPT) are a plus.
• Experience in KSA or GCC regulatory environments highly preferred.

Required skills

What we offer

• 6‑month engagement with immediate mobilisation.
• High probability of a permanent offer or long‑term contract.
• Opportunity to work on strategic privacy initiatives in the financial sector and develop executive dashboards.