Data Privacy Specialist

Description :

Job Title : Data Privacy Specialist

Job Type : Full Time

Work Type : Onsite

Location : Riyadh, Saudi Arabia

Experience Required : 8 to 10 Years (KSA experience preferred)

Notice Period : Immediate Joiners Preferred

Work Timings, Days & Holiday Calendar : As per KSA regulations

Role Overview :

We are seeking a skilled and detail-oriented Data Privacy Specialist to join our clients compliance and cybersecurity team in Riyadh, Saudi Arabia. This role is critical to ensuring that all personal data processing activities comply with the applicable data protection laws and standards, particularly those enforced by SAMA, NCA, and the Personal Data Protection Law (PDPL) in Saudi Arabia.

The ideal candidate has hands-on experience in implementing privacy frameworks, conducting privacy impact assessments, and collaborating with cross-functional teams to embed privacy by design principles across systems and processes.

Roles and Responsibilities :

• Develop, implement, and maintain a comprehensive Data Privacy Program in alignment with SAMA, NCA ECC, and PDPL requirements.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new projects, systems, and services.
• Serve as the point of contact for data subject rights (DSR), including access, correction, deletion, and consent management.
• Collaborate with cybersecurity, legal, IT, HR, and compliance teams to embed privacy by design and privacy by default principles.
• Maintain and update records of processing activities (ROPAs) as required by law.
• Monitor data flows and cross-border transfers to ensure regulatory compliance.
• Provide input during vendor onboarding to assess third-party data protection risk and ensure data processing agreements (DPAs) are in place.
• Develop privacy training, awareness sessions, and communication campaigns for internal stakeholders.
• Stay current with evolving KSA privacy regulations, global privacy standards (e.g., GDPR), and emerging privacy risks.
• Support audit readiness and regulatory interactions, including responses to inquiries or investigations by SAMA, NCA, or Saudi Data & AI Authority (SDAIA).

Requirements :

Technical & Professional Skills :

1. KSA PDPL, SAMA Cybersecurity Framework, and NCA ECC

2. Global standards such as GDPR, ISO / IEC 27701, and NIST Privacy Framework

3. Privacy tools and technologies for consent management, data classification, and data mapping

Preferred Certifications :

Personal Attributes :

(ref : hirist.tech)