Director - Data Privacy

ROLE PURPOSELead the Data Privacy function and team, setting the strategic direction for Tawuniya’s data protection program and providing organization-wide oversight to ensure compliance with applicable privacy policies and regulations. Drive the development and continuous enhancement of privacy strategies, governance and risk management practices, while ensuring effective execution through the Data Privacy team and cross-functional collaboration.KEY ACCOUNTABILITIES & ACTIVITIES1. Data Protection Strategy & DirectionDefine and drive Tawuniya’s data protection strategy and strategic priorities in collaboration with cross-functional leadership, including Legal, and oversee the continuous enhancement of the Personal Data Protection program.2. Privacy Policies & GovernanceLead and oversee the development, implementation, periodic review and continuous enhancement of Tawuniya’s privacy policies and procedures in accordance with applicable regulations and best practices.3. Privacy Compliance Oversight & Executive ReportingProvide oversight of Tawuniya’s privacy compliance program, ensuring compliance status, key risks and areas requiring attention are monitored and reported to top management on a quarterly basis.4. Regulatory & Data Subject OversightOversee and ensure effective management of communications and privacy matters involving relevant authorities and individuals whose personal data is processed, including the appropriate management of data subject rights and communications.5. Data Protection Impact AssessmentOversee the Data Protection Impact Assessment process and ensure appropriate guidance, monitoring and cross-functional collaboration are in place to address identified privacy risks, incidents or breaches.6. Privacy Risk ManagementProvide oversight of the identification and analysis of privacy risks across Tawuniya’s privacy ecosystem and ensure appropriate mitigation measures are established and monitored.7. Third-Party Privacy ComplianceOversee coordination with relevant business sectors, including Procurement, to ensure third parties and personal data processors adhere to applicable privacy regulations and requirements.8. Privacy Training & AwarenessProvide direction and oversight for privacy training and awareness activities, ensuring employees understand their responsibilities and compliance requirements related to personal data processing and privacy risk mitigation.9. Privacy Compliance & EnforcementOversee collaboration with Legal and HR to establish and maintain appropriate sanctions and measures for non-compliance with privacy policies.10. Internal Privacy Audit & AssuranceOversee the establishment and maintenance of the internal privacy audit program in coordination with Tawuniya’s Internal Audit function, ensuring adherence to applicable privacy standards and regulations.11. Cross-Functional LeadershipLead engagement with relevant business sectors and functions to ensure effective implementation of data protection requirements and alignment of privacy priorities across the organization.12. People LeadershipLead, develop and provide direction to the Data Privacy team, ensuring clear accountability, effective performance and appropriate allocation of responsibilities across the privacy function.MAIN INTERACTIONSInternal Stakeholders: Top Management, Legal, HR, Procurement, Internal Audit, business sectors and other relevant functions.External Stakeholders: Relevant authorities, data subjects, third parties and personal data processors.QUALIFICATIONSEducation: Bachelor’s degree in information technology, Law, Business or a related field.Knowledge & Experience5+ years of related experience.10+ years of total professional experience.Preferred experience in risk management or data security and protection.Preferred certifications in Privacy Management, such as CIPM, CIPP/E, or CIPT.Thorough knowledge of regulations and policies related to personal data protection.Sound knowledge of organizational administrative rules and procedures.Knowledge of information security and protection, including data classification and data privacy.Expertise in building, implementing and managing data protection programs.Expertise in national data protection requirements, including PDPL, and international data protection laws such as GDPR.