Data Protection & Privacy Director

About the Role

Hays is seeking an experienced Data Protection & Privacy Director to lead and manage the organization's privacy and data protection program. This full-time position is based in Riyadh, Saudi Arabia, and focuses on ensuring compliance with privacy laws, protecting personal data, and reducing business risks.

Role Purpose

The primary purpose of this role is to build a strong privacy culture across the company by developing and implementing robust data privacy policies and procedures. The Director will be responsible for overseeing all aspects of data protection and privacy, ensuring the organization adheres to relevant regulations and best practices.

Key Responsibilities

• Develop and maintain data privacy policies and procedures.
• Ensure compliance with privacy regulations such as PDPL, GDPR, and CCPA.
• Conduct privacy risk assessments and compliance audits.
• Lead investigations and response activities for data breaches and privacy incidents.
• Manage Data Subject Requests (DSARs) and regulatory communications.
• Collaborate with Legal, IT, Security, and business teams on privacy matters.
• Deliver privacy awareness and training programs for employees.
• Monitor updates to privacy laws and implement necessary changes.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field.
• A Master's degree is considered an advantage.
• A minimum of 10 years of relevant experience in data protection and privacy.

Required Skills

• Strong knowledge of data privacy, governance, compliance, and risk management principles.
• Excellent understanding of privacy regulations and security best practices.

Location

This position is based in Riyadh, Saudi Arabia.