Closed or Expired Job Posting This job posting is closed or has expired and is no longer open for applications.
Upload
Job Purpose
The primary responsibility of the Data Privacy and Protection Analyst also is to ensure assist Ejada System’s processing of personal data, including that of employees, contractors, customers, and third parties, complies with relevant data protection laws. Also, the analyst will support the DPO to establish, manage, and monitor a robust data protection program while assisting in cultivating organizational awareness and adherence to all applicable data protection requirements.
Role and Responsibilities
- Ensure adherence to data protection laws and regulations, including Kingdom of Saudi Arabia Personal Data Protection Law, and other data protection laws and regulations governing personal data processing and as applicable to Ejada Systems.
- Execute initiatives to promote organizational understanding and adherence to data privacy requirements. Implement strategies to embed a culture of data privacy compliance across departments.
- Provide guidance and support to Business Departments in implementing data privacy governance. Assist in the development and enforcement of tailored risk mitigation strategies.
- Collaborate on educational initiatives and training sessions to enhance Ejada System’s compliance and understanding of data privacy practices.
- Update, maintain and implement the personal data protection policies, procedures and templates.
- Ensure data subject rights are managed and requests are handled in accordance with the regulatory requirements.
- Ensure Records of Processing Activities (RoPA)register is continually maintained and updated.
- Ensure personal data retention requirements are applied and followed across Ejada.
- Ensure management of consent records across the organization.
- Ensure Data Privacy Impact Assessments (DPIA) are conducted for high-risk processing activities.
- Ensure third-party list is monitored and maintained where personal data is being shared outside of Ejada Systems.
- Ensure contracts with third parties include personal data protection requirements aligned with the data protection laws and regulations governing personal data processing and as applicable to Ejada Systems.
- Ensure data processing agreements are in place where personal data is transferred outside Ejada Systems.
- Ensure necessary administrative, organizational and technical measures in place to ensure security of personal data.
Qualifications and Education Requirement
Qualifications and Education RequirementBA/B.Sc. in business or a field related to information technology or law, business administration, management, related field or significant work experience.Knowledge of regulations and policies on personal data protection, for example, the KSA PDPL, NDMO etc., and a track record of managing organizational compliance.Awareness and understanding of the evolving data protection laws and regulations in the KSA and Middle East.Industry-recognized certifications in CIPM, CIPT, FIP, CIPP, CDMP, CDPSE (Certified Data Privacy Solutions Engineer).Years & Nature of ExperienceWould have 2+ years of equivalent experience in the data privacy field.Good knowledge of KSA Personal Data Protection Law, particularly in consent, data subject rights, and sharing data across jurisdictions.Awareness and understanding of the evolving data protection laws and regulations in the Middle East.Experience in data mapping and classification to identify the types of data collected, processed, and shared.
Education
Business or a field related to information technology or law, business administration, m
Skills
- Sound understanding of technology
- Audit and Monitoring
- Ability to work independently and as part of a team.
- Excellent communication skills with the ability to foster long-term relationships with stakeholders.
- Excellent written and verbal communication skills.
Job Details
Preferred Candidate
