Data Protection Officer (DPO)

About Cenomi Centers

Cenomi Centers is seeking a Data Protection Officer (DPO) to join their team in Riyadh, Saudi Arabia. This full-time role is crucial for ensuring the company's compliance with data protection regulations.

Role Purpose

The Data Protection Officer will lead and oversee Cenomi Centers’ personal data protection compliance program. This involves ensuring adherence to the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and all applicable SDAIA requirements.

Key Responsibilities

• Oversee PDPL compliance across all business functions within the organization.
• Maintain Records of Processing Activities (ROPA) and manage Data Protection Impact Assessments (DPIA).
• Monitor practices related to personal data processing, sharing, retention, and protection.
• Provide advice on data subject rights, third-party data processing arrangements, and personal data breaches.
• Coordinate with SDAIA and relevant internal stakeholders on data protection matters.
• Develop and monitor data protection policies, procedures, awareness and training programs, and compliance reporting.
• Offer independent professional advice and escalate material data protection risks to the appropriate management level.
• Perform additional roles and tasks as required by management.

Qualifications and Experience

• Bachelor's degree in Law, Information Systems, Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of relevant professional experience, with at least 2 years specifically in personal data protection or privacy compliance.
• Practical knowledge of the Saudi PDPL, its Implementing Regulations, and SDAIA requirements.
• Hands-on experience with ROPA, DPIA, personal data breach management, and privacy risk assessments.
• Previous experience serving as a DPO or implementing an organization-wide PDPL compliance program.
• Familiarity with ISO/IEC 27701 and ISO/IEC 27001 standards.

Required Skills

• Strong communication skills.
• Effective stakeholder management abilities.
• Professional data privacy certifications such as CIPP, CIPM, CIPT, or equivalent.