Data Protection Specialist

About the Role

* Naghi Motors is seeking a Data Protection Specialist to join its team in Makkah or Jeddah. This full-time role involves supporting the Data Protection Officer in the implementation, operation, and monitoring of the organization’s data protection framework. The specialist will focus on execution, documentation, monitoring activities, and coordination to ensure compliance with the Saudi Personal Data Protection Law (PDPL) and other applicable data protection regulations.

Key Responsibilities

• Support the implementation and ongoing operation of the data protection framework in line with Saudi PDPL and internal policies.
• Assist in monitoring compliance with data protection policies, procedures, and controls across business units.
• Support the review of personal data processing activities to ensure alignment with PDPL requirements.
• Assist in handling data subject rights requests, including logging, coordination, and response preparation within statutory timelines.
• Support the identification and assessment of data protection risks and contribute to Data Protection Impact Assessments (DPIAs).
• Maintain and update Records of Processing Activities (RoPA) and data flow documentation.
• Assist in monitoring third-party service providers and processors for data protection compliance.
• Support investigation, documentation, and remediation of personal data breach incidents and escalate to the DPO as required.
• Maintain accurate, complete, and secure data protection documentation, logs, and registers.
• Coordinate with IT, HR, Legal, Compliance, and business units to collect data protection information and evidence.
• Support the review of privacy notices, consent forms, data sharing agreements, and data protection clauses.
• Assist in preparing data protection reports, dashboards, and compliance updates for the DPO.
• Support data protection awareness and training activities, including tracking employee completion.
• Assist in preparing documentation and responses for internal audits, external audits, and regulatory reviews.
• Escalate data protection risks, incidents, and non-compliance issues to the Data Protection Officer in a timely manner.
• Contribute to promoting a culture of data privacy, confidentiality, and accountability across the organization.

Performance Objectives

• Timely support in achieving 100% compliance with Saudi PDPL and applicable data protection regulations.
• Accurate and timely handling of assigned data subject rights requests within statutory timelines.
• 100% accuracy and completeness of data protection documentation, including RoPA.
• Timely identification and escalation of data protection risks and incidents to the Data Protection Officer.
• Completion of assigned DPIA tasks within agreed timelines.
• Effective support in monitoring third-party data protection compliance.
• Zero data confidentiality breaches attributable to documentation or handling errors.
• Timely support in preparing data protection compliance reports for management.
• Accurate tracking of mandatory data protection training completion rates.

Work Environment

This is a full-time position based in the Makkah or Jeddah region, supporting the organization's data protection framework under the supervision of the Data Protection Officer.