Data Protection Specialist
Role Summary
Supports the Data Protection Officer in implementing, operating, and monitoring the organization’s data protection framework. The role focuses on execution, documentation, monitoring activities, and coordination to ensure compliance with Saudi PDPL and applicable data protection regulations. Assists in managing data subject rights, maintaining records, supporting risk assessments, and handling data breach incidents under the supervision of the Data Protection Officer.
Key Responsibilities & Tasks
• Support the implementation and ongoing operation of the data protection framework in line with Saudi PDPL and internal policies.
• Assist in monitoring compliance with data protection policies, procedures, and controls across business units.
• Support the review of personal data processing activities to ensure alignment with PDPL requirements.
• Assist in handling data subject rights requests, including logging, coordination, and response preparation within statutory timelines.
• Support the identification and assessment of data protection risks and contribute to Data Protection Impact Assessments (DPIAs).
• Maintain and update Records of Processing Activities (RoPA) and data flow documentation.
• Assist in monitoring third-party service providers and processors for data protection compliance.
• Support investigation, documentation, and remediation of personal data breach incidents and escalate to the DPO as required.
• Maintain accurate, complete, and secure data protection documentation, logs, and registers.
• Coordinate with IT, HR, Legal, Compliance, and business units to collect data protection information and evidence.
• Support the review of privacy notices, consent forms, data sharing agreements, and data protection clauses.
• Assist in preparing data protection reports, dashboards, and compliance updates for the DPO.
• Support data protection awareness and training activities, including tracking employee completion.
• Assist in preparing documentation and responses for internal audits, external audits, and regulatory reviews.
• Escalate data protection risks, incidents, and non-compliance issues to the Data Protection Officer in a timely manner.
• Contribute to promoting a culture of data privacy, confidentiality, and accountability across the organization.
Objectives & KPIs
• Timely support in achieving 100% compliance with Saudi PDPL and applicable data protection regulations.
• Accurate and timely handling of assigned data subject rights requests within statutory timelines.
• 100% accuracy and completeness of data protection documentation, including RoPA.
• Timely identification and escalation of data protection risks and incidents to the Data Protection Officer.
• Completion of assigned DPIA tasks within agreed timelines.
• Effective support in monitoring third-party data protection compliance.
• Zero data confidentiality breaches attributable to documentation or handling errors.
• Timely support in preparing data protection compliance reports for management.
• Accurate tracking of mandatory data protection training completion rates.