Data Privacy Consultant

About C5i

C5i is an AI & Analytics provider focused on delivering trustworthy intelligence by combining human perspective with AI technology. The company offers a comprehensive solution set, integrating multifunctional teams with technical and business domain expertise, alongside a robust suite of products and accelerators. C5i aims to deliver business impact at speed and scale by driving the adoption of AI-assisted decision-making for clients including Fortune 500 companies across sectors such as Technology, Media, Telecom (TMT), Pharma & Lifesciences, CPG, Retail, and Banking. C5i has been recognized by industry analysts like Gartner and Forrester for its capabilities.

The Role of Data Privacy Consultant

C5i is seeking a Data Privacy Consultant to establish frameworks for Personal Data Protection and Data Classification. This full-time role, based in Riyadh, Saudi Arabia, involves managing and developing privacy strategies, roadmaps, and implementation plans that align with organizational goals related to data protection and classification. The ideal candidate will have 5-10 years of experience in this field.

Key Responsibilities

• Perform assessments to evaluate the current state of the Personal Data Protection environment.
• Conduct impact assessments of potential damages from unauthorized access to identified datasets and artifacts.
• Identify "public" category data.
• Create Data Management and Personal Data Protection Strategies and Plans, supporting enterprise-wide Data Protection & Privacy programs and providing guidance on global standards and best practices.
• Develop a Data Classification Plan to manage and orchestrate data classification activities.
• Prioritize datasets and artifacts based on their classification level.
• Identify and inventory all datasets and artifacts as part of the Data Classification Implementation process.
• Oversee the communication and enforcement of Data Protection & Privacy policies, processes, guidelines, and standards (*, Consent Management, Data Subject Rights Management, Data Localization, Personal Data Access, Sharing and Transfer, Personal Data Breach Handling).
• Develop and conduct Personal Data Protection training for employees to promote a privacy-centric culture in accordance with national privacy regulations.
• Liaise and respond to the Data Protection Authority of KSA for regulatory queries and audits.
• Develop and document breach management procedures, including incident review processes, response mechanisms, implementation of permanent corrective actions, and testing of implemented solutions.
• Drive privacy operations such as impact assessments and data mapping through implemented privacy technology solutions across business departments.
• Work with website development teams to review third-party cookies and provide guidance on managing marketing/preference consent as per applicable regulatory law.
• Support in identifying third-party privacy risks by conducting vendor privacy risk assessments and providing risk mitigation recommendations.
• Ensure all customer-facing channels comply with applicable regulatory requirements through thorough assessments.
• Support in personal data discovery through automation and review the PII inventory.
• Ensure and verify sensitive personal data elements are identified during data discovery exercises through technology implementation.
• Support in establishing a record of processing activities through technology implementation.

Required Experience

• A minimum of 5 to 10 years of relevant experience in data privacy, data protection, or data classification.

Work Environment and Type

This is a full-time position based in Riyadh, Saudi Arabia. The role involves working within a dynamic environment focused on AI and analytics solutions for large enterprises.

Application Information

Salary details for this position will be disclosed during the recruitment process.