Data Protection Officer (DPO) - Riyadh

Company Description drovox is a Saudi mobility technology company focused on creating seamless, reliable, and locally relevant transportation experiences. Through its platform, drovox connects passengers with independent drivers, known as drovox Heroes, offering safe, transparent, and convenient ride-hailing services. The company is building a scalable mobility ecosystem that serves individuals, businesses, institutions, events, and strategic partners through technology, data, and customer-centered design. With deep knowledge of the Saudi market and the evolving needs of its cities, drovox emphasizes safety, service quality, and end-to-end mobility operations. As drovox grows, it is strengthening governance, operational capabilities, and talent across areas such as transportation technology, artificial intelligence, and corporate mobility solutions.Role Description The Data Protection Officer (DPO) at drovox will oversee and manage all aspects of data privacy and protection across the organization. This full-time, on-site role based in Riyadh involves monitoring compliance with applicable data protection laws and regulations, including Saudi-specific frameworks and international standards where relevant. The DPO will design, implement, and maintain privacy policies, procedures, and controls, and conduct regular audits and assessments to identify and mitigate data protection risks. Day-to-day responsibilities include advising teams on privacy-by-design practices, reviewing new products and features for data protection impact, handling data subject requests, and coordinating with regulatory authorities as needed. The DPO will collaborate closely with legal, technology, operations, and customer experience teams to ensure that drovox’s mobility ecosystem operates with strong privacy governance and secure data handling.QualificationsStrong expertise in data protection and privacy, including Data Privacy and Privacy Compliance.Proven experience in Regulatory Compliance and Law, preferably in technology, transportation, or mobility sectors.Demonstrated ability to develop, implement, and maintain Privacy Policies and related governance frameworks.Knowledge of Saudi data protection regulations and familiarity with international standards (e.g., GDPR or equivalent).Bachelor’s degree or higher in Law, Information Security, Computer Science, or a related discipline.Experience conducting privacy impact assessments, risk analyses, and internal audits.Ability to work cross-functionally with legal, engineering, product, and operations teams, and to communicate complex concepts clearly.Strong analytical skills, attention to detail, and a proactive approach to problem-solving and continuous improvement.Professional certifications in data protection or information security (e.g., CIPP, CIPM, CIPT, or similar) are an advantage.Proficiency in English; Arabic language skills are highly beneficial for working with local stakeholders and regulators.