Data Privacy Consultant

About the role

C5i is seeking a Data Privacy Consultant to design and implement a comprehensive Personal Data Protection and Data Classification framework for a leading bank. The role will drive privacy strategy, ensure regulatory compliance, and embed a data‑centric culture across the organization.

Key responsibilities

• Perform assessments of the current Personal Data Protection environment and conduct impact assessments for potential unauthorized data access.
• Identify public‑category data and develop a Data Management and Personal Data Protection strategy aligned with global standards.
• Create and execute a Data Classification plan, inventory all datasets and artifacts, and prioritize actions based on classification levels.
• Oversee policies, processes, and guidelines related to consent management, data subject rights, data localization, access, sharing, transfer, and breach handling.
• Develop training material and deliver Personal Data Protection training to all employees.
• Liaise with the Data Protection Authority of KSA for regulatory queries and audits.
• Document and manage breach response procedures, defining roles and responsibilities for incident review.

Required profile

• Proven experience in personal data protection, data classification, and privacy program implementation.
• Strong knowledge of national and international privacy regulations, especially those applicable in the Kingdom of Saudi Arabia.
• Ability to develop and enforce privacy policies, conduct assessments, and lead training initiatives.
• Excellent communication skills for interacting with regulatory authorities and internal stakeholders.

Required skills