Overview
Data Protection Officer – DPO Jobs in Riyadh, Saudi Arabia at Propel Consult
Role Purpose
The Data Protection Officer leads the organization's compliance with the Saudi Personal Data Protection Law (PDPL) and oversees the protection of personal data across the group and its subsidiaries. The DPO monitors compliance, advises the business, acts as the contact point for data subjects and for SDAIA, and provides independent assurance that personal data is processed lawfully, fairly and securely.
KEY RESPONSIBILITIES, ACCOUNTABILITIES AND ACTIVITIES
General
· Monitor and oversee ongoing compliance with the PDPL, its Implementing Regulations and the SDAIA DPO Rules across all processing activities of the group and its subsidiaries.
· Act as the contact point with SDAIA and with data subjects; register and keep the DPO's contact details current on the National Data Governance Platform.
· Advise the business on data-protection obligations and review new products, services, systems and processing activities before launch.
· Maintain the Records of Processing Activities (RoPA) and oversee Data Protection Impact Assessments (DPIAs) for high-risk processing.
· Ensure breach response plans are adequate and effective; notify SDAIA within 72 hours of becoming aware of a notifiable breach, and notify affected individuals where the breach is high-risk.
· Manage requests for access, correction, deletion, objection and portability within the statutory timeframes.
· Ensure an approved transfer mechanism (SCCs or BCRs) and a transfer risk assessment are in place before any personal data leaves the Kingdom.
· Deliver data-protection awareness, training and knowledge transfer across the organization.
· Prepare periodic compliance reports and recommendations for senior management and the Data & AI Governance Committee.
Work with the CISO on security controls for personal data and with the CDPO on the wider data-governance programme.
Title: Data Protection Officer – DPO
Company: Propel Consult
Location: Riyadh, Saudi Arabia
