Data Privacy Consultant📣 Job Ad

About C5i

C5i is a dedicated AI & Analytics provider that combines human perspective with AI technology to deliver trustworthy intelligence. The company drives value through a comprehensive solution set, integrating multifunctional teams with technical and business domain expertise alongside a robust suite of products, solutions, and accelerators. C5i's core focus is to deliver business impact at speed and scale by driving the adoption of AI-assisted decision-making. C5i caters to some of the world’s largest enterprises, including many Fortune 500 companies, with clients spanning Technology, Media, and Telecom (TMT), Pharma & Lifesciences, CPG, Retail, and Banking sectors. The company has been recognized by leading industry analysts like Gartner and Forrester for its Analytics and AI capabilities and proprietary AI-based platforms.

The Opportunity: Data Privacy Consultant

C5i is seeking a Data Privacy Consultant to join our team in Riyadh. This full-time role is critical for establishing robust frameworks for "Personal Data Protection" and "Data Classification." The consultant will manage and develop the privacy strategy, roadmap, and implementation plan, ensuring alignment with organizational goals and objectives in these key domains. A minimum of 5-10 years of relevant experience is required for this position.

Key Responsibilities

• Perform assessments to evaluate the current state of the Personal Data Protection environment.
• Conduct impact assessments of potential damages due to unauthorized access to identified datasets and artifacts.
• Identify and classify "public" category data.
• Create Data Management and Personal Data Protection Strategies and Plans, supporting the delivery of enterprise-wide Data Protection & Privacy programs and providing guidance on global standards and best practices.
• Develop a Data Classification Plan to manage and orchestrate the organization's Data Classification activities.
• Create a prioritization list based on the classification level of datasets and artifacts for the organization.
• Identify and inventory all datasets and artifacts owned by the organization as part of the Data Classification Implementation process.
• Oversee the communication and enforcement of policies, processes, guidelines, and standards related to Data Protection & Privacy (*, Consent Management, Data Subject Rights Management, Data Localization, Personal Data Access, Sharing and Transfer, Personal Data Breach Handling).
• Develop training materials and conduct Personal Data Protection training for employees to promote a privacy-centric culture in accordance with entity-specific and national privacy regulations.
• Liaise and respond to the Data Protection Authority of KSA for regulatory queries and audits.
• Develop and document breach management procedures to directly manage and address privacy violations, defining functions and responsibilities for the affected work team, covering:
  • Process for conducting incident review by the Data Controller with the Regulatory Authority.
  • Development of response mechanisms based on incidents reported by the Data Controller and/or Data Processor.
  • Implementation of processes to perform permanent corrective actions when issued by the Regulatory Authority.
  • Development of testing for implemented corrective actions to validate personal data protection solutions.
• Drive privacy operations such as impact assessments and data mapping through implemented privacy technology solutions across business departments.
• Collaborate with the website development team to review third-party cookies and provide guidance on managing marketing/preference consent stored within business departments, as per applicable regulatory law.
• Support in identifying third-party privacy risks by conducting vendor privacy risk assessments through technology and coordinating with business departments to highlight risks and provide mitigation recommendations.
• Ensure all customer-facing channels of the organization comply with applicable regulatory requirements by conducting thorough assessments.
• Support in personal data discovery through automation and review the PII inventory for the organization.
• Ensure and verify sensitive personal data elements are identified during data discovery exercises through technology implementation.
• Support in establishing a record of processing activities through technology implementation.

Required Experience and Qualifications

• A minimum of 5 to 10 years of experience in data privacy, data protection, or a closely related field.
• Demonstrated expertise in establishing and managing frameworks for Personal Data Protection and Data Classification.
• Strong understanding of global data protection standards, best practices, and national privacy regulations, particularly within KSA.
• Experience with privacy technology solutions for impact assessments, data mapping, data discovery, and record of processing activities.
• Proven ability to develop and implement privacy strategies, policies, and training programs.
• Experience in conducting privacy risk assessments, including vendor assessments, and providing effective mitigation recommendations.
• Familiarity with breach management procedures and regulatory liaison processes.

Commitment to Diversity

C5i is an equal opportunity employer. We are committed to fostering a diverse and inclusive workplace, ensuring equal employment opportunities regardless of race, color, religion, sex, sexual orientation, age, marital status, disability, or gender identity. Applicants requiring accommodation due to a disability or special need are encouraged to inform us during the hiring stages to facilitate necessary arrangements.