Group Data Protection Officer Holding Company

About the Role: Group Data Protection Officer

Tamer Services Company is partnering with a leading holding company in Jeddah, Makkah, to appoint a Group Data Protection Officer (DPO). This full-time, strategic leadership role is responsible for establishing and overseeing the Group's enterprise-wide data privacy and protection framework. The successful candidate will ensure compliance with the KSA Personal Data Protection Law (PDPL) and serve as the Group's primary privacy advisor, driving governance and a strong data protection culture across the organization.

Key Responsibilities

• Lead the implementation and continuous monitoring of the Group's data privacy framework in alignment with the KSA PDPL.
• Act as the primary point of contact with SDAIA, coordinating regulatory communications and compliance initiatives.
• Oversee Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).
• Advise business and technology teams on Privacy by Design principles and privacy risk management.
• Coordinate personal data breach response activities and regulatory notifications as required.
• Drive consistency across subsidiary DPOs and strengthen enterprise-wide privacy governance.
• Promote a culture of data privacy through awareness, training, and engagement initiatives.
• Provide regular reporting and strategic recommendations to senior leadership on privacy risks and compliance.

Qualifications and Experience

• 8+ years of experience in data protection, privacy, legal, compliance, or risk management.
• Hands-on expertise in the KSA PDPL, its Implementing Regulations, and SDAIA/NDMO requirements.
• Strong knowledge of privacy operations, including RoPA, DPIAs, breach management, Data Subject Rights, and cross-border data transfers.
• Familiarity with international privacy and security frameworks such as GDPR and ISO 27001.
• Experience operating within a multi-entity or holding company environment is highly preferred.
• Bachelor's degree in Law, Information Governance, Cybersecurity, Information Technology, or a related discipline.
• A recognized privacy certification is considered an advantage.
• Fluency in both Arabic and English.

Required Skills

• Ability to influence senior stakeholders across a complex group structure.
• Excellent stakeholder management and communication skills.
• Strong regulatory expertise combined with practical application.

Work Environment

This role operates within a leading holding company structure, requiring collaboration across various subsidiaries and engagement with senior leadership. The position is based in Jeddah, Makkah.