Data Protection Officer; DPO

Overview

Saudi Data Protection Officer (DPO)

📍 Riyadh, Saudi Arabia

📅 Full-time | On-site

🔒 Cybersecurity & Compliance Department

Company: CYBER – A National Leader in Cybersecurity Advisory & Compliance

Reporting to: CISO

CYBER is a Saudi cybersecurity consulting firm trusted by national entities and critical infrastructure sectors. We partner with government and private sector organizations to drive compliance with national cybersecurity mandates, data protection frameworks, and secure digital transformation.

We are looking for a Saudi National to serve as the Data Protection Officer (DPO), aligned with the legal requirements of the Saudi Personal Data Protection Law (PDPL). The selected candidate will lead compliance governance for internal operations and client engagements, working closely with cross-functional teams and regulatory bodies.

This role is vital to maintaining data protection integrity across CYBER’s service portfolio and will contribute directly to national data protection objectives.

• Act as the subject matter expert for PDPL compliance within CYBER and for client support engagements.
• Monitor internal and client-related compliance activities and conduct audits where necessary.
• Serve as the official liaison with the Saudi Data & Artificial Intelligence Authority (SDAIA) or other supervisory bodies.
• Handle data subject inquiries and ensure rights are upheld under applicable laws.
• Lead data breach response planning and assist in incident investigations.
• Deliver internal and external training on data protection awareness and legal obligations.
• Support executive management in compliance risk assessment and reporting.
• Coordinate with Cybersecurity, Legal, Risk, and Project teams to ensure integrated governance.

• Saudi National (required in compliance with Saudi regulations for DPO designation under PDPL).
• 2–5 years of experience in data protection, legal compliance, or privacy governance.
• Bachelor's degree in Law, Information Security, or a related field.
• Professional certifications such as CIPM, CIPP, CDPO, or ISO 27701 are preferred.
• Strong familiarity with NCA frameworks and national cybersecurity regulations.

• Excellent analytical and risk evaluation skills.
• Strong written and verbal communication skills in both Arabic and English.
• High integrity, confidentiality, and professional accountability.
• Comfortable interacting with senior leadership and external regulators.

• Competitive compensation linked to experience and performance.
• Continuous learning, certifications, and development pathways.
• A collaborative and mission-driven work environment.
• Opportunities to work on national-level strategic projects.