Personal Data Protection Officer📣 Job Ad

About the Role

Gulf International Bank is seeking a Personal Data Protection Officer to oversee the personal data protection agenda and monitor compliance with relevant laws and regulations. This role ensures that personal data is processed in accordance with legal and regulatory requirements, organizational policies, and recognized best practices. The Personal Data Protection Officer will serve as the primary contact for regulators, individuals, and internal stakeholders on all matters related to personal data protection.

Key Responsibilities

• Inform and advise GIB, as Data Controller or Data Processor, and its employees on obligations to comply with the KSA PDPL and other applicable data protection laws.
• Act as the primary point of contact for authorities and individuals whose personal data is processed.
• Implement the provisions of the Saudi Arabia Personal Data Protection Law, its Implementation Regulations, and the Regulation of Personal Data – Transfer Outside the Kingdom, as well as executing instructions from the Competent Authority.
• Maintain and regularly update the Record of Processing Activities (RoPA) by identifying, assessing, and monitoring risks associated with personal data processing.
• Lead and supervise data protection impact assessments, recommend corrective actions, and ensure risk mitigation measures are implemented across GIB's privacy ecosystem.
• Support and coordinate with relevant stakeholders, including the Compliance Unit, to identify, report, and manage personal data incidents or breaches, ensuring compliance with regulatory requirements.
• Monitor and periodically report to top management on the organization's privacy compliance status.
• Oversee the resolution of violations and non-compliance in data privacy activities and ensure corrective measures are implemented.
• Manage and respond to data subject rights in line with privacy regulations, collaborating with Business Units to process requests within regulatory timelines and maintaining records.
• Work with legal and HR teams to develop appropriate sanctions for non-compliance with privacy policies and procedures.
• Coordinate with Business Units, including procurement, to review and advise on third-party data processing agreements for local/international transfers, and advise on ongoing compliance.
• Evaluate personal data cross-border transfer requests and ensure compliance with regulatory requirements and safeguards.
• Oversee the design, implementation, maintenance, and ongoing compliance of GIB's privacy policies and procedures.
• Periodically review and update the procedures set forth in GIB's Privacy Policy.
• Assign responsibilities, educate employees on compliance requirements, train staff involved in personal data processing, and develop a data privacy mitigation plan.
• Establish and maintain an internal privacy audit program in coordination with the internal audit function.
• Support and advise Business Units responsible for developing and operating modern technological systems to ensure compliance with applicable regulations.

Qualifications and Experience

• A minimum of 2-5 years of relevant experience in data protection or a related field.
• Strong understanding of Personal Data Protection Law (KSA PDPL) and other applicable data protection regulations.
• Demonstrated ability to implement and monitor compliance with data protection frameworks.

Work Location

This is a direct employee position based in Al Khobar.