Data Privacy Manager

About the role

The Data Privacy Manager will lead the bank’s privacy program, translating regulatory requirements into day‑to‑day controls and ensuring compliance with the Saudi PDPL, SAMA, NDMO and relevant international standards. Reporting to the Head of the Data Privacy Office, the role will coordinate privacy initiatives across business, technology and third‑party environments.

Key responsibilities

• Implement and operationalise approved privacy policies, standards, procedures and guidelines throughout the organisation.
• Monitor and enforce privacy controls in business units and technology teams, escalating non‑compliance as needed.
• Execute privacy compliance activities aligned with PDPL, SAMA and NDMO, support audits and regulatory reviews.
• Maintain Records of Processing Activities (ROPA) and data inventories.
• Manage Data Subject Rights Requests (DSARs) – access, correction, deletion, portability – within statutory timelines.
• Conduct Privacy Impact Assessments (DPIAs) for new products, systems, vendors and initiatives, recommending mitigation measures.
• Support privacy‑by‑design in digital, analytics, AI and transformation projects.
• Maintain the privacy incident register and coordinate breach notifications to regulators and affected individuals.

Required profile

• Bachelor’s degree with strong banking experience; relevant privacy, security or compliance certifications are a plus.
• 5‑8 years of experience in data privacy or a related field, preferably within a regulated financial services environment.
• Demonstrated ability to translate regulatory requirements into practical controls and to work collaboratively with diverse stakeholders.

Required skills

• In‑depth knowledge of PDPL, SAMA regulations and privacy operational controls.
• Hands‑on experience with DSAR handling, ROPA maintenance, DPIA execution and privacy incident management.
• Understanding of data lifecycle management and data classification frameworks.