The Data Protection Officer (DPO) will oversee and manage the organization’s data protection strategy to ensure compliance with KSA’s Personal Data Protection Law (PDPL), National Cybersecurity Authority (NCA) regulations, and other relevant cybersecurity and data privacy standards. The DPO will be responsible for implementing data protection protocols, promoting best practices in data security, and ensuring the protection of sensitive information across all systems and processes.
Key Requirements:
Education:
Bachelors degree in Law, Information Security, Computer Science, or related fields.
Professional certifications such as Certified Information Privacy Professional (CIPP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or similar are highly desirable.
Experience:
At least 10-12 years of experience in data protection, privacy law, information security, or cybersecurity.
In-depth knowledge of KSAs Personal Data Protection Law (PDPL) and National Cybersecurity Authority (NCA) regulations.
Experience implementing data protection frameworks, security protocols, and risk management practices in compliance with local and international standards.
Skills and Competencies:
Strong understanding of data protection principles, data security protocols, and cybersecurity best practices.
Knowledge of NCA and PDPL regulatory requirements, including data breach reporting and handling.
Strong communication skills, both written and verbal, with the ability to explain complex technical issues to non-technical stakeholders.
Ability to collaborate across departments (IT, security, legal, compliance) to ensure data protection measures are implemented effectively.