Get AI-powered advice on this job and more exclusive features.
PDPL Compliance Specialist / Data Protection Officer (PDPL Implementation)
Department : Compliance / Governance / Information Security
Reports To : Compliance Manager / Data Protection Officer / Senior Management
Job Summary
The PDPL Compliance Specialist is responsible for supporting the organization in implementing and maintaining compliance with the Personal Data Protection Law (PDPL) of Saudi Arabia. The role ensures that all personal data is collected, processed, stored, and shared in accordance with legal requirements and organizational policies. This includes developing documentation, conducting assessments, maintaining records, and creating awareness across the organization.
Key Responsibilities
- Support the development and rollout of the organization’s PDPL compliance program.
- Ensure policies, procedures, and practices align with PDPL requirements.
- Maintain documentation required for compliance and regulatory reporting.
- Assist departments in documenting personal data processing activities.
- Maintain an up-to-date RoPA across the organization.
- Validate data types, retention periods, and processing purposes.
- Identify personal data flows within systems, processes, and applications.
- Support development of data flow diagrams and mapping exercises.
- Highlight points where personal data is shared, stored, or transferred.
- Assist in drafting and updating privacy-related policies, including :
- Privacy Notice
- Data Retention Policy
- DPIA Procedure
- Third-Party Data Processing Policy
- Ensure policies reflect organizational practices and PDPL obligations.
- Support the DPIA process for new projects, systems, or services.
- Identify risks related to personal data and recommend mitigation actions.
- Track completion of corrective measures.
- Review third-party data processing arrangements.
- Ensure contracts and agreements include PDPL‑compliant data protection clauses.
- Monitor third‑party obligations and documentation.
- Support the breach identification and reporting process.
- Maintain breach logs and coordinate follow‑ups.
- Ensure breaches are handled according to internal procedures and legal timelines.
- Assist in creating awareness sessions on PDPL requirements.
- Prepare basic training material for employees.
- Conduct periodic reviews to assess compliance levels.
- Prepare reports on PDPL implementation status for management.
- Track action items and improvement plans.
Qualifications & Skills
Education
Bachelor’s degree in IT, Business, Cybersecurity, or related field.Technical Knowledge
Basic understanding of data protection principles and PDPL requirements.Familiarity with privacy best practices and information security fundamentals.Soft Skills
Strong communication and coordination skills.Good analytical, documentation, and organizational abilities.Ability to work with cross‑functional teams.Experience
2–5 years of experience in compliance, data protection, governance, cybersecurity, or auditing.Exposure to PDPL, GDPR, or other privacy regulations is an advantage.Drop your CV on
Details
Seniority level : Mid‑Senior levelEmployment type : Full‑timeJob function : Finance and SalesIndustry : AccountingReferrals increase your chances of interviewing at Levelup Arab by 2x
Get notified about new Compliance Specialist jobs in Riyadh, Saudi Arabia .
Governance & Compliance Senior Specialist
#J-18808-Ljbffr