Director - Data Privacy

ROLE PURPOSE Lead the Data Privacy function and team, setting the strategic direction for Tawuniya’s data protection program and providing organization-wide oversight to ensure compliance with applicable privacy policies and regulations. Drive the development and continuous enhancement of privacy strategies, governance and risk management practices, while ensuring effective execution through the Data Privacy team and cross-functional collaboration. KEY ACCOUNTABILITIES & ACTIVITIES 1. Data Protection Strategy & Direction Define and drive Tawuniya’s data protection strategy and strategic priorities in collaboration with cross-functional leadership, including Legal, and oversee the continuous enhancement of the Personal Data Protection program. 2. Privacy Policies & Governance Lead and oversee the development, implementation, periodic review and continuous enhancement of Tawuniya’s privacy policies and procedures in accordance with applicable regulations and best practices. 3. Privacy Compliance Oversight & Executive Reporting Provide oversight of Tawuniya’s privacy compliance program, ensuring compliance status, key risks and areas requiring attention are monitored and reported to top management on a quarterly basis. 4. Regulatory & Data Subject Oversight Oversee and ensure effective management of communications and privacy matters involving relevant authorities and individuals whose personal data is processed, including the appropriate management of data subject rights and communications. 5. Data Protection Impact Assessment Oversee the Data Protection Impact Assessment process and ensure appropriate guidance, monitoring and cross-functional collaboration are in place to address identified privacy risks, incidents or breaches. 6. Privacy Risk Management Provide oversight of the identification and analysis of privacy risks across Tawuniya’s privacy ecosystem and ensure appropriate mitigation measures are established and monitored. 7. Third-Party Privacy Compliance Oversee coordination with relevant business sectors, including Procurement, to ensure third parties and personal data processors adhere to applicable privacy regulations and requirements. 8. Privacy Training & Awareness Provide direction and oversight for privacy training and awareness activities, ensuring employees understand their responsibilities and compliance requirements related to personal data processing and privacy risk mitigation. 9. Privacy Compliance & Enforcement Oversee collaboration with Legal and HR to establish and maintain appropriate sanctions and measures for non-compliance with privacy policies. 10. Internal Privacy Audit & Assurance Oversee the establishment and maintenance of the internal privacy audit program in coordination with Tawuniya’s Internal Audit function, ensuring adherence to applicable privacy standards and regulations. 11. Cross-Functional Leadership Lead engagement with relevant business sectors and functions to ensure effective implementation of data protection requirements and alignment of privacy priorities across the organization. 12. People Leadership Lead, develop and provide direction to the Data Privacy team, ensuring clear accountability, effective performance and appropriate allocation of responsibilities across the privacy function. MAIN INTERACTIONS Internal Stakeholders: Top Management, Legal, HR, Procurement, Internal Audit, business sectors and other relevant functions. External Stakeholders: Relevant authorities, data subjects, third parties and personal data processors. QUALIFICATIONS Education: Bachelor’s degree in information technology, Law, Business or a related field. Knowledge & Experience - 5+ years of related experience. - 10+ years of total professional experience. - Preferred experience in risk management or data security and protection. - Preferred certifications in Privacy Management, such as CIPM, CIPP/E, or CIPT. - Thorough knowledge of regulations and policies related to personal data protection. - Sound knowledge of organizational administrative rules and procedures. - Knowledge of information security and protection, including data classification and data privacy. - Expertise in building, implementing and managing data protection programs. - Expertise in national data protection requirements, including PDPL, and international data protection laws such as GDPR.

• AI & Data Management Director

  Riyadh, Saudi Arabia

• Programme / Project Director - Data Centres

  Accenture Middle East · Riyadh, Riyadh, Saudi Arabia

• Director AI and Data Value

  Riyadh Air | طيران الرياض · Riyadh Region