Data Privacy Officer📣 Job Ad

About the Role

Al Beit Al Ahli Financing Company is seeking a Data Privacy Officer to join their team in the Makkah Region, specifically in Jeddah and Makkah. This is a full-time position with an experience requirement of 0-1 years.

Role Overview

The Data Privacy Officer serves as the operational owner responsible for the execution of personal data protection requirements. This role involves managing various aspects of data privacy compliance to ensure adherence to regulations and best practices.

Key Responsibilities

• Managing data subject rights requests, including validation, documentation, and coordination of responses for access, correction, destruction, and consent withdrawal, ensuring timely action and proper documentation of any extensions or refusals.
• Preparing and maintaining privacy notices, ensuring they clearly communicate controller identity, processing purposes, legal basis, retention periods, and data subject rights.
• Coordinating consent capture and evidence, and maintaining procedures for consent withdrawal and cessation of processing where consent is the sole legal basis.
• Supporting direct marketing and advertising controls, including opt-out mechanisms and sender identity disclosure.
• Creating and maintaining written records of personal data processing activities, including details on controllers, purposes, data categories, retention periods, recipients, transfers, and security measures.
• Conducting and documenting privacy impact assessments for processing activities that may pose a risk to data subject privacy.
• Maintaining the personal data inventory and supporting data classification activities based on impact, sensitivity, and regulatory requirements.
• Reviewing data sharing requests, validating their purpose, legal basis, and safeguards, and preparing necessary agreements.
• Maintaining a register of personal data transfers outside the Kingdom and conducting transfer risk assessments where required.
• Reviewing third-party and processor privacy compliance, including questionnaires, due diligence, and contractual clauses.
• Coordinating with incident response teams to identify personal data breaches, preparing breach analyses, and supporting necessary notifications.
• Maintaining retention and destruction procedures for personal data and ensuring data accuracy and completeness.
• Conducting privacy awareness activities and performing periodic privacy compliance checks.

Required Deliverables

• Data subject rights register and request evidence.
• Privacy notice register and consent/withdrawal evidence.
• Records of processing activities register.
• Privacy impact assessments and legitimate interest assessments.
• Personal data inventory and classification evidence.
• Data sharing request register and data sharing agreements.
• Cross-border transfer register and transfer risk assessments.
• Processor due diligence records, contract review evidence, and sub-processor approval records.
• Personal data breach notification packs and corrective action evidence.
• Retention, destruction, correction, and data quality records.
• Privacy compliance dashboard and awareness records.

Work Environment

This is a full-time position based in the Makkah Region, with opportunities in both Jeddah and Makkah. The role requires 0-1 years of experience.