Data Protection Officer

About the Role

Tabby is seeking a Data Protection Officer to join its team in Riyadh, Saudi Arabia. This full-time position reports directly to the Head of Information Security and is responsible for developing and implementing robust data protection frameworks in alignment with local and international standards.

Role Context

The Data Protection Officer will play a central role in ensuring Tabby's compliance with data protection regulations, particularly the Saudi Arabian Personal Data Protection Law (PDPL). This involves integrating data protection principles across all operational processes and acting as a key advisor to senior management on data protection strategy.

Key Responsibilities

• Develop and implement data protection policies, procedures, and guidelines in line with Saudi PDPL and international standards.
• Ensure data processing activities comply with PDPL, integrating data protection principles across all relevant processes.
• Establish a data governance framework for data retention, deletion, and archiving, consistent with PDPL requirements.
• Review and audit data activities to ensure PDPL compliance, identifying and addressing any gaps with corrective actions.
• Maintain comprehensive documentation to demonstrate compliance, including risk assessments and data protection decisions.
• Guide Data Protection Impact Assessments (DPIAs) and ensure identified risks are effectively mitigated.
• Manage data subject access requests (DSARs) and complaints, ensuring timely responses and resolution.
• Develop and maintain a data breach response plan, leading investigations and notifying the Saudi Data & AI Authority (SDAIA) when required.
• Act as the primary liaison with regulatory bodies, coordinating audits, inquiries, and maintaining strong relationships.
• Provide employee training on data protection responsibilities, fostering a culture of compliance throughout the organization.
• Advise senior management on data protection strategy, collaborating with various departments to embed best practices.
• Ensure compliance with data localization and minimization principles, regularly reviewing processing activities.
• Create and maintain clear, accessible privacy notices, updating them to reflect changes in data processing or regulations.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within a dynamic environment focused on maintaining high standards of information security and data protection.

Application Process

Candidates interested in this Data Protection Officer role are encouraged to apply.