Job Description

Location: Riyadh, KSA.
Working Arrangement: on-site.
Language Requirements: Fluency in Arabic & English (written and spoken).
Nationalities: Saudi nationals.

We are seeking a Saudi National PDPL Senior Consultant to support the implementation, operationalization, and ongoing compliance of Saudi Arabia's Personal Data Protection Law (PDPL) within the organization. The role will focus on maintaining privacy controls, monitoring compliance, supporting privacy operations, and collaborating with business, legal, IT, and data governance teams to ensure alignment with SDAIA guidance and regulatory requirements.

Key Requirements

• Saudi National.
• Proven experience implementing and supporting Saudi Arabia's Personal Data Protection Law (PDPL) requirements.
• Hands-on experience maintaining Records of Processing Activities (RoPA)
• Experience supporting Data Protection Impact Assessments (DPIAs)

Other Qualifications

• Bachelor's degree in Law, Information Security, Computer Science, Information Technology, Business Administration, or a related field.
• Strong analytical and problem-solving skills.
• Excellent documentation and reporting capabilities.
• Ability to coordinate with cross-functional teams and manage multiple compliance activities simultaneously.

Key Responsibilities

• Support the implementation and operationalization of PDPL requirements across the organization.
• Monitor ongoing compliance with PDPL regulations and SDAIA guidance.
• Maintain privacy controls, policies, procedures, and operational documentation.
• Manage and maintain Records of Processing Activities (RoPA).
• Support Data Protection Impact Assessments (DPIAs) and other privacy compliance assessments.
• Coordinate the handling of data subject rights requests and privacy-related incidents.
• Monitor data classification and data protection controls to ensure regulatory compliance.
• Collaborate with business, legal, IT, and data governance teams to implement privacy requirements and enhancements.
• Prepare compliance reports, audit artifacts, and regulatory documentation to demonstrate compliance readiness.
• Identify privacy risks and recommend corrective actions to strengthen the organization's privacy program.