Data Privacy Consultant

About the role

The Data Privacy Consultant will lead and enhance our organization’s privacy program, ensuring compliance with Saudi PDPL, GDPR, NDMO and other relevant regulations. You will work closely with legal, compliance, cybersecurity and technology teams to embed privacy‑by‑design across all initiatives.

Key responsibilities

• Develop, implement and maintain privacy policies, standards, procedures and governance frameworks.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Maintain personal data inventories, data‑flow maps and classification activities.
• Manage Data Subject Access Requests (DSAR) and support related compliance processes.
• Perform third‑party privacy assessments and vendor reviews.
• Execute privacy risk assessments, ongoing monitoring and compliance reporting.
• Support privacy incident investigations, reporting and remediation.
• Participate in Privacy‑by‑Design reviews for new systems and business initiatives.
• Collaborate with cross‑functional teams to strengthen privacy controls and deliver training.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Computer Science or related field.
• Saudi national (mandatory).
• Minimum 5 years of experience in data privacy, data governance, information security, compliance or risk management.
• Professional certifications such as CIPP, CIPM, ISO 27701 or equivalent are preferred.

Required skills

• Data Privacy Program Management
• Privacy Impact Assessments (PIA/DPIA)
• Personal Data Inventory and Data Mapping
• Data Subject Rights (DSAR) Management
• Third‑Party Privacy Risk Assessments
• Privacy Risk Management and Compliance Monitoring
• Privacy Incident Management
• Privacy‑by‑Design Principles
• Regulatory Compliance (PDPL, GDPR, NDMO, SAMA)
• Privacy Policy, Standard and Procedure Development
• Data Governance and Information Lifecycle Management
• Stakeholder Management and Regulatory Communication
• Risk Assessment and Control Evaluation