Personal Data Protection Senior Specialist

About Master Works

Master Works is a Saudi technology company focused on driving digital transformation. The company provides expertise in data management, AI, software development, and digital strategy, contributing to the digital economy in line with Saudi Vision 2030.

The Role

Master Works is seeking a Personal Data Protection Senior Specialist to join its team in Riyadh, Saudi Arabia. This full-time role involves supporting the establishment, implementation, and maintenance of effective personal data protection and privacy practices within the organization. The position requires 5-10 years of relevant experience.

Key Responsibilities

• Support the implementation and continuous improvement of the organization's personal data protection and privacy framework.
• Monitor and support compliance with applicable personal data protection laws, regulations, policies, and standards.
• Develop, review, and maintain personal data protection policies, procedures, guidelines, and controls.
• Support the identification, assessment, and mitigation of personal data protection and privacy risks.
• Collaborate with Information Security, Risk, Legal, IT, Data Management, and business teams on data protection initiatives.
• Support the classification, handling, storage, retention, and secure processing of personal data.
• Assist in assessing data processing activities and identifying privacy and data protection requirements.
• Support privacy and data protection assessments, audits, and compliance reviews.
• Monitor and report on personal data protection compliance, risks, and control effectiveness.
• Provide guidance to relevant stakeholders on personal data protection requirements and best practices.
• Support awareness and training initiatives related to personal data protection and privacy.
• Keep up to date with changes in personal data protection laws, regulations, standards, and industry practices.
• Contribute to the continuous improvement of personal data protection processes, controls, and governance practices.

Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Law, or a related field.
• 5-10 years of experience working with data protection policies, frameworks, controls, and compliance requirements.

Required Skills and Knowledge

• Good knowledge of Personal Data Protection laws, regulations, policies, and compliance requirements.
• Strong understanding of data protection and information security principles.
• Knowledge of data classification, data privacy, data handling, and information protection practices.
• Understanding of privacy and data protection risks and related controls.
• Ability to interpret regulatory requirements and translate them into practical policies, processes, and controls.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to work effectively with cross-functional teams, including Legal, Risk, Information Security, IT, and business functions.