Regional Data Protection Officer - GDPR, PDPL, CIPT / ISO 27701

About the job REGIONAL DATA PROTECTION OFFICER – GDPR, PDPL, CIPT / ISO 27701

A leading international technology company is rapidly expanding across Europe, the UK, and the Middle East. The organisation builds and delivers cutting‑edge digital products that empower users and businesses to connect, create, and grow. With expansion into 13 global markets underway, the company is investing heavily in technical and regulatory excellence within data protection and compliance. Role Overview

As the Technical Data Protection Officer (DPO), you will lead the company’s technical privacy programme translating global legal obligations into scalable, automated engineering practices. Reporting to the CTO, you’ll design compliance architecture, implement privacy‑by‑design, and collaborate across engineering, product, and security teams to ensure full alignment with GDPR, Saudi PDPL, and emerging international privacy standards. This is a hands‑on, high‑impact role that bridges compliance, security, and technology leadership. Key Responsibilities

Technical Privacy Architecture

Design and own the company’s global GDPR and PDPL compliance architecture, including data‑flow mapping, consent management, and automation of data‑subject requests. Embed Privacy by Design principles throughout the engineering lifecycle from schema design to API development and infrastructure. Develop frameworks for data minimisation, pseudonymisation, and encryption in storage and transit. Lead the adoption of privacy and data‑governance tooling (e.g., RoPA systems, breach‑response automation, audit logging).

Compliance Engineering & Automation

Build and operationalise DPIA / RoPA / DSAR automation pipelines integrated with internal systems. Collaborate with the security team on incident‑response and breach‑notification automation. Define and monitor technical controls for retention, deletion, and lawful data transfers (SCCs, UK IDTA, and regional equivalents). Implement access‑control frameworks, audit trails, and continuous compliance monitoring within infrastructure.

Cross‑Functional Privacy Leadership

Partner with legal, product, and security teams to ensure technical implementation aligns with privacy policy. Act as the engineering liaison for external auditors and regulators during compliance reviews. Deliver training on privacy‑by‑design and secure‑development best practices. Provide technical advice for privacy requirements in third‑party integrations, SDKs, and cloud configurations.

Global Compliance Expansion

Drive readiness for multi‑market expansion across the EU, UK, KSA, and other jurisdictions. Harmonise compliance frameworks with other data‑protection laws (CCPA / CPRA, DIFC / ADGM, Morocco Law 09‑08, etc.). Lead initiatives to unify global compliance controls under a single privacy‑tech platform.

Qualifications & Experience

7+ years of experience in technical privacy, security engineering, or data governance. Strong technical understanding of GDPR (EU + UK), Saudi PDPL, and privacy principles (lawfulness, minimisation, accountability). Experience implementing privacy and security controls within cloud or SaaS environments (AWS, GCP, Azure). Expertise in data mapping, ETL privacy management, and access‑governance automation. Familiarity with privacy engineering frameworks (NIST Privacy Framework, ISO 27701, CNIL PIA, etc.). Proficient in DevSecOps practices, API security, and automated data‑retention policies. Certifications such as CIPT, CIPP / E, or ISO 27701 Lead Implementer are advantageous. Excellent communication skills able to translate complex regulatory requirements into practical engineering solutions. Arabic language proficiency is an advantage but not required. Success Indicators (First 12 Months)

Fully operational GDPR and PDPL compliance architecture integrated within the company’s technology stack. Documented and automated data‑lifecycle management across all products and systems. RoPA / DPIA / DSAR frameworks implemented with minimal manual intervention. Achieved audit‑ready status for EU, UK, and KSA compliance. Why Join

Lead and shape a technical privacy programme from the ground up, reporting directly to the CTO. Play a key role in the compliance strategy for a fast‑scaling global platform. Collaborate with world‑class engineering, product, and legal teams in a mission‑driven, innovation‑focused environment. Vertical : Technology

#J-18808-Ljbffr