Director Data Privacy

About the Role

Tawuniya is seeking a Director Data Privacy to lead its data protection program in Riyadh, Saudi Arabia. This full-time position involves setting the strategic direction for data privacy across the organization and ensuring compliance with applicable policies and regulations.

Role Purpose and Strategic Impact

The Director Data Privacy will be responsible for driving the development and continuous enhancement of Tawuniya’s privacy strategies, governance, and risk management practices. This role provides organization-wide oversight, ensuring effective execution through the Data Privacy team and robust cross-functional collaboration to maintain a strong data protection posture.

Key Responsibilities

• Define and drive Tawuniya’s data protection strategy and strategic priorities, collaborating with cross-functional leadership, including Legal.
• Lead the development, implementation, periodic review, and continuous enhancement of privacy policies and procedures in accordance with applicable regulations and best practices.
• Oversee the privacy compliance program, ensuring compliance status, key risks, and areas requiring attention are monitored and reported to top management on a quarterly basis.
• Manage communications and privacy matters involving relevant authorities and individuals whose personal data is processed, including data subject rights.
• Oversee the Data Protection Impact Assessment (DPIA) process, ensuring appropriate guidance, monitoring, and cross-functional collaboration to address identified privacy risks, incidents, or breaches.
• Provide oversight for identifying and analyzing privacy risks across Tawuniya’s privacy ecosystem and ensure appropriate mitigation measures are established and monitored.
• Coordinate with relevant business sectors, including Procurement, to ensure third parties and personal data processors adhere to applicable privacy regulations and requirements.
• Direct privacy training and awareness activities, ensuring employees understand their responsibilities and compliance requirements related to personal data processing and privacy risk mitigation.
• Collaborate with Legal and HR to establish and maintain appropriate sanctions and measures for non-compliance with privacy policies.
• Oversee the establishment and maintenance of the internal privacy audit program in coordination with Tawuniya’s Internal Audit function, ensuring adherence to applicable privacy standards and regulations.
• Lead engagement with relevant business sectors and functions to ensure effective implementation of data protection requirements and alignment of privacy priorities across the organization.
• Lead, develop, and provide direction to the Data Privacy team, ensuring clear accountability, effective performance, and appropriate allocation of responsibilities.

Stakeholder Engagement

This role requires extensive collaboration with various stakeholders to ensure comprehensive data privacy management. Key interactions include internal stakeholders such as Top Management, Legal, HR, Procurement, Internal Audit, business sectors, and other relevant functions. External engagement involves relevant authorities, data subjects, third parties, and personal data processors.

Candidate Profile

Candidates for this position should possess over 10 years of relevant experience in data privacy, data protection, or a related field. The role demands strong leadership capabilities and a deep understanding of privacy regulations and best practices.

Application Information

Tawuniya invites qualified professionals to apply for this leadership opportunity in Riyadh.