Personal Data Protection Officer

About the Role

Gulf International Bank is seeking a Personal Data Protection Officer to oversee the Personal Data Protection agenda and monitor compliance with relevant laws and regulations. This full-time position is based in Al Khobar, Eastern region, and requires 2-5 years of experience. The officer will ensure personal data is processed according to legal and regulatory requirements, organizational policies, and best practices, acting as the primary contact for regulators and stakeholders.

Key Responsibilities

• Inform and advise GIB, as Data Controller or Data Processor, and its employees on obligations under the KSA PDPL and other applicable data protection laws.
• Serve as the primary point of contact for authorities and individuals whose personal data is processed.
• Implement provisions of the Saudi Arabia Personal Data Protection Law, its Implementation Regulations, and the Regulation of Personal Data – Transfer Outside the Kingdom.
• Execute decisions and instructions issued by the Competent Authority.
• Maintain and regularly update the Record of Processing Activities (RoPA) by identifying, assessing, and monitoring risks associated with personal data processing.
• Lead and supervise Data Protection Impact Assessments, recommend corrective actions, and ensure risk mitigation measures are implemented.
• Support and coordinate with relevant stakeholders to identify, report, and manage personal data incidents or breaches, ensuring regulatory compliance.
• Monitor and periodically report to top management on the organization's privacy compliance status.
• Oversee the resolution of violations and non-compliance in data privacy activities and ensure corrective measures are implemented.
• Manage and respond to data subject rights requests in line with privacy regulations, collaborating with Business Units to process requests within regulatory timelines.
• Work with legal and HR teams to develop appropriate sanctions for non-compliance with privacy policies and procedures.
• Coordinate with Business Units, including procurement, to review and advise on third-party data processing agreements for local/international transfers.
• Evaluate personal data cross-border transfer requests and ensure compliance with regulatory requirements and safeguards.
• Oversee the design, implementation, maintenance, and ongoing compliance of GIB's privacy policies and procedures.
• Periodically review and update procedures set forth in GIB's Privacy Policy.
• Assign responsibilities and educate employees on compliance requirements, including training staff involved in personal data processing.
• Develop a data privacy mitigation plan to address identified privacy risks.
• Establish and maintain an internal privacy audit program in coordination with the internal audit function.
• Support and advise Business Units responsible for developing and operating modern technological systems to ensure regulatory compliance.

Experience and Qualifications

Candidates should possess 2-5 years of relevant experience in data protection or privacy compliance. A strong understanding of personal data protection laws and regulations, particularly the KSA PDPL, is essential for this role.

Work Environment

This is a full-time position located in Al Khobar, Eastern region. The Personal Data Protection Officer will work within Gulf International Bank, collaborating with various internal stakeholders and acting as a key liaison with external regulatory bodies.

Application Process

Interested candidates are encouraged to apply. Salary details for this position will be discussed during the interview process.