PDPL Specialist - 12 Months Contract

We are seeking a Data Privacy (PDPL) Specialist to support the organization's privacy compliance program and ensure adherence to the Saudi Personal Data Protection Law (PDPL), SDAIA regulations, and applicable privacy requirements within the financial sector.The successful candidate will assist in the implementation and monitoring of privacy controls, conduct privacy assessments, maintain privacy documentation, support regulatory compliance initiatives, and collaborate with business stakeholders to ensure the protection of personal data across the organization.Key ResponsibilitiesPrivacy Compliance & GovernanceSupport the implementation and ongoing enhancement of the organization's PDPL compliance program.Assist in ensuring compliance with Saudi Personal Data Protection Law (PDPL) and associated Executive Regulations.Support the implementation of SDAIA and SAMA privacy and data protection requirements.Monitor regulatory updates and assess their impact on organizational privacy practices.Privacy Assessments & Risk ManagementAssist in conducting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).Participate in privacy risk assessments and support remediation tracking activities.Identify privacy compliance gaps and recommend corrective actions.Support third-party privacy risk reviews and due diligence assessments.Data Protection & DocumentationMaintain Records of Processing Activities (ROPA) and data processing inventories.Support personal data classification, retention, and disposal initiatives.Maintain privacy policies, procedures, standards, and supporting documentation.Ensure privacy documentation remains accurate and up to date.Data Subject Rights & Incident ManagementAssist in managing data subject requests and privacy inquiries.Support investigations involving personal data incidents and privacy breaches.Assist in documenting privacy incidents and tracking corrective actions.Support compliance reporting and evidence collection activities.Awareness & Stakeholder EngagementParticipate in privacy awareness campaigns and training initiatives.Coordinate with business units to ensure ongoing compliance with privacy requirements.Assist stakeholders in understanding privacy obligations and data protection controls.Support communication of privacy-related requirements across the organization.Required QualificationsEducationBachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline.Experience1-2 years of experience in:Data PrivacyInformation SecurityGovernance, Risk & Compliance (GRC)Risk ManagementCompliance or related fieldsExperience within banking, financial services, fintech, or regulated industries is preferred.Required Technical KnowledgeCandidates should possess knowledge of:Saudi Personal Data Protection Law (PDPL) and Executive RegulationsSDAIA privacy and data protection requirementsSAMA Cyber Security Framework (CSF)Personal data classification and handling requirementsData retention and disposal requirementsPrivacy Impact Assessments (PIA)Data Protection Impact Assessments (DPIA)Data Subject Rights ManagementConsent ManagementLawful Basis for ProcessingCross-Border Data Transfer RequirementsThird-Party Privacy Risk ManagementPersonal Data Breach Management and Incident ReportingPrivacy-by-Design and Privacy-by-Default PrinciplesData Inventory and Records of Processing Activities (ROPA)ISO/IEC 27701ISO/IEC 27001Privacy Governance FrameworksRequired SkillsStrong analytical and problem-solving skillsAbility to review policies, standards, and regulatory requirementsExperience conducting compliance assessments and gap analysisStrong documentation and reporting capabilitiesEffective stakeholder engagement and coordination skillsExcellent verbal and written communication skills in EnglishProficiency in Microsoft Office Suite (Word, Excel, PowerPoint)Strong organizational and time management skillsAttention to detail and commitment to data accuracy