An exciting opportunity is available for Sr Advisor I, Data Management, located in Riyadh.  Report to: Head, Data Management

Job purpose:

The primary purpose of the Data Privacy Senior Specialist is to support the Personal Data Protection Officer (PDPO) in managing key tasks in order to comply with the applicable data privacy regulations and strengthen TASNEE’s data privacy landscape and culture.

The Data Privacy Senior Specialist is a core member of the data privacy compliance team and will support driving, managing and monitoring data privacy activities within TASNEE and raise the level of awareness regarding privacy related topics. The Data Privacy Senior Specialist shall directly report to the PDPO and should be involved in managing day to day tasks with primary focus on enhancing the internal control environment for the protection of personal data.

Role responsibilities:

• Document, analyze and respond to data privacy incidents or breaches by coordinating with TASNEE’s business units and the PDPO.
• Lead the development, review and monitoring of records of all data processing activities conducted by all TASNEE businesses.
• Develop and implement guidelines for personal data privacy management. This includes ensuring transparency about how personal data is used, upholding individuals' rights to have their personal data erased, and establishing robust measures to protect personal information.
• Lead and Perform data protection impact assessment and monitor its performance across TASNEE’s business units.
• Review and assess privacy awareness effectiveness among staff and identify skills gaps and training requirements.
• Establish and maintain appropriate communication channels with stakeholders for any change in their processes.
• Monitoring and tracking of the remediation steps to bridge the gaps identified in the privacy audits and assessments.
• Periodically reviewing and, where necessary, updating the procedures set forth in TASNEE’s Privacy Policy.

Qualification and Requirements:

• 8 years’ experience in global privacy and protection laws and related domains, including conducting ROPAs, DPIAs and Delivering trainings.
• Information Capture and Management.
• Records Management and Archiving.
• Policies, Standards and Procedures.
• Data Gathering, Analysis & Reporting.
• Planning & Organising.