Data Privacy Manager📣 Job Ad

About Derayah Financial and the Role

Derayah Financial is seeking a Data Privacy Manager to join its team in Riyadh, Saudi Arabia. This full-time role is central to ensuring the organization's adherence to data privacy regulations and standards within the Kingdom and beyond.

Role Overview

The Data Privacy Manager is responsible for leading the organization's data privacy program. This involves ensuring alignment with the Personal Data Protection Law (PDPL) of Saudi Arabia and other applicable regulations. The role serves as the operational owner of the privacy framework and data privacy platform, ensuring that personal data processing activities across the organization meet regulatory requirements, contractual obligations, and internal privacy standards.

Key Responsibilities: Privacy Program & Governance

• Operate and maintain the organization-wide data privacy program in line with PDPL, SDAIA regulations, and applicable cross-border data transfer requirements.
• Develop, maintain, and review privacy policies, procedures, standards, and notices.
• Maintain the Record of Processing Activities (ROPA) and ensure its accuracy across all business units.
• Manage data classification, retention, and minimization controls in coordination with data management and information security functions.
• Track regulatory developments (PDPL, SDAIA, NDMO, sector-specific guidance) and translate them into actionable internal requirements.

Key Responsibilities: Privacy Operations

• Conduct and oversee Data Protection Impact Assessments (DPIA) and Privacy Impact Assessments (PIA) for new and existing processing activities.
• Manage the data subject rights (DSR) request lifecycle, including intake, validation, fulfillment, and reporting within regulatory timeframes.
• Lead the privacy incident response process, including breach assessment, notification to SDAIA and affected individuals, and post-incident remediation.
• Manage and operationalize the Data Privacy technical platform.

Required Experience

Candidates should possess 5-10 years of relevant experience in data privacy management or a related field, demonstrating a strong understanding of data protection laws and operational frameworks.

Work Type and Location

This is a full-time position based in Riyadh, Saudi Arabia.