Data Privacy Consultant

About the Role

We are currently seeking an experienced Data Privacy Consultant to support our personal data protection and privacy compliance engagements. The ideal candidate combines a strong understanding of personal data protection law with hands-on experience implementing privacy technology platforms, and is able to deliver end-to-end privacy programmes — from regulatory gap assessments and policy development through tool configuration and operational rollout. You will work with government and private sector clients to ensure compliance with the Personal Data Protection Law (PDPL), SDAIA regulations, and NDMO standards, translating legal requirements into practical controls and processes.

Responsibilities

Conduct PDPL gap assessments and privacy maturity assessments for government and private sector clients, and develop remediation roadmaps.Interpret the Personal Data Protection Law (PDPL) and its Implementing Regulations, and translate legal requirements into practical policies, procedures, and controls.Develop privacy governance artefacts, including privacy policies, privacy notices, consent frameworks, data retention schedules, and data processing agreements.Perform personal data discovery, data mapping, and Records of Processing Activities (RoPA).Design and operationalize Data Subject Rights (DSR) request handling, including intake, identity verification, fulfilment, and tracking workflows.Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments for new and existing processing activities, systems, and projects.Configure data classification, sensitivity labelling, and data loss prevention (DLP) policies to protect personal and sensitive data.Support consent and cookie management implementation, as well as third-party and vendor privacy risk assessments.Develop personal data breach management and notification procedures aligned with SDAIA requirements.Align client privacy programmes with SDAIA regulations, NDMO personal data protection standards, and National Data Index (NDI) requirements.Apply knowledge of privacy tools such as OneTrust, Securiti, BigID, Microsoft Purview, and Informatica to support privacy compliance.Deliver privacy awareness sessions and training, and run workshops with legal, compliance, IT, and business stakeholders.Contribute to proposals, solution design, business development, and practice growth in data privacy and protection.

Requirements

Bachelor's Degree in Law, Computer Science, Information Technology, or a related field.2–5 years of experience in data privacy, data protection, or privacy compliance, with strong knowledge of the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.Hands-on experience implementing privacy management platforms such as OneTrust, Securiti, BigID, Microsoft Purview, or Informatica.Proven experience delivering privacy engagements across both government and private sectors.Strong communication and stakeholder management skills in English and Arabic.Preferred:Knowledge of international data protection laws, such as the EU General Data Protection Regulation (GDPR), is a plus.Familiarity with NDMO standards, the National Data Index (NDI), and SDAIA regulatory guidance.Experience in information security, data classification, and data governance practices.Preferred Certificates:IAPP certification such as CIPP/E, CIPM, or CIPT.Platform certifications in OneTrust, Securiti, BigID, Microsoft Purview, or Informatica.Applications end on 11/12/2026.