Data Privacy Specialist

Role Overview

Data Privacy Specialist at Saudi Arabia Navigation Services (SANS). This role oversees data privacy initiatives to ensure compliance with relevant laws and regulations, serving as the primary point of contact for personal data protection matters.

Role Purpose

The Data Privacy Specialist is responsible for overseeing SANS's data privacy initiatives to ensure compliance with relevant laws and regulations. The role provides guidance on personal data protection policies and monitors data processing activities related to personal data within set KPIs, agreed budgets, and adopted policies and procedures.

Key Responsibilities

Personal Data Protection

• Develop and maintain the implementation of Personal Data Protection policies, procedures and processes in alignment with national Personal Data Protection laws and regulations.
• Serve as the point of contact between SANS and relevant regulatory authorities for handling personal data privacy-related complaints and requests.
• Oversee records of all personal data processing activities and coordinate the investigation of data breaches.
• Coordinate with Cybersecurity on relevant programs that implement controls to isolate, detect, and protect against the risks of personal data.
• Ensure personal data protection controls are in place within all SANS third-party contracts and that personal data protection controls are shared with external vendors.
• Review and update contracts and service and operation level agreements in accordance with privacy policies and procedures approved by SANS.
• Ensure that processes around providing consumers with notices and consents are maintained and adhered to.
• Review and handle data subjects' requests related to the processing of their personal data.
• Inform, advise, and train the organization and employees on their obligations under personal data protection law requirements.
• Support the launch of awareness programs to promote a culture of privacy and to raise awareness pursuant to privacy policies and procedures approved by SANS.
• Work with Data Governance and Compliance Specialist to conduct compliance audits and recommend corrective actions when needed.
• Conduct impact assessment and risk assessments of the operation and use of information systems containing personal data, including the collection and processing of personal data, and the storing and transmittal of personal data by each system, whether automated or manual.
• Conduct incident review and response to data breaches, formulating corrective actions in alignment with national regulations.
• Promote effective collaboration and communication with internal team members and maintain cross-departmental alignment to ensure synergy and coherence.

Policies, Processes and Procedures

• Conduct day-to-day activities while ensuring compliance with policies and procedures.
• Contribute to the identification of opportunities for continuous improvement of systems and processes, considering leading practices, changes in the business environment, cost reduction, and productivity improvement.

Qualifications & Experience

• Minimum of 6 years of relevant experience in data protection, privacy, or compliance roles.
• Experience in risks, data security, and protection is preferred.
• Familiarity with personal data protection regulations and policies.
• Knowledge in information security and protection, including classification and data privacy.
• In-depth knowledge of data protection laws and regulations.
• Bachelor's degree in Information Management, Computer Science, Software Engineering, or related fields.
• Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT) preferred.