Data Privacy Manager

Job PurposeTo manage and operationalize the Bank’s Data Privacy program by implementing approved privacy frameworks, controls, and processes, ensuring day-to-day compliance with PDPL, SAMA, NDMO, and applicable international standards.The role supports the Head of Data Privacy Office by executing privacy initiatives, managing privacy risks, handling data subject rights and incidents, and embedding privacy controls across business, technology, and third-party activities.Key AccountabilitiesPrivacy Policies, Systems & ProceduresImplement and operationalize approved data privacy policies, standards, procedures, and guidelines across the Bank.Ensure consistent execution of privacy controls by business units and technology teams.Monitor adherence to privacy requirements and escalate non-compliance issues as required.Support alignment between privacy controls and information security, data classification, and data governance frameworks.Regulatory Compliance & Operational PrivacyExecute privacy compliance activities in line with PDPL, SAMA, and NDMO requirements.Monitor regulatory updates and support impact assessments and implementation actions.Support audits, regulatory reviews, and internal assessments related to data privacy.Maintain and update Records of Processing Activities (ROPA) and data inventories.Data Subject Rights ManagementManage and coordinate Data Subject Rights Requests (DSARs), including access, correction, deletion, and portability, in line with PDPL timelines.Coordinate with internal stakeholders to ensure accurate, complete, and timely responses.Maintain DSAR logs, evidence, and reporting metrics.Privacy Risk, DPIAs & New InitiativesConduct and support Privacy Impact Assessments (DPIAs) for new products, systems, vendors, and initiatives.Identify privacy risks and recommend mitigation controls.Support privacy-by-design implementation in digital, analytics, AI, and transformation initiatives. Incident & Breach HandlingMaintain the privacy incident register and ensure proper documentation.Support notification processes to regulators and affected individuals, as required.Data Lifecycle & RetentionQualifications, Experience, Skills & CompetenciesEducation:Bachelor's degree acceptable educational level accompanied by a strong banking experience.Relevant certifications (privacy, security, risk, or compliance) are an advantage.Experience:5-8 years of Experience in the Data Privacy or a related fieldExperience operating privacy controls within a regulated or financial services environment is preferred.Skills & Competencies:Strong working knowledge of PDPL, SAMA regulations, and privacy operational controls.Hands-on experience with DSARs, ROPA, DPIAs, and privacy incident handling.Understanding of data lifecycle management and data classification.Strong coordination, documentation, and stakeholder management skills.Ability to translate regulatory requirements into practical controls.