Senior Manager - Privacy & Protection

The Data Privacy Manager establishes the necessary Data Privacy Frameworks drive the data privacy programs over the organization's practices ensuring that the handling, management and processing of data adheres to privacy policies, standards and regulatory requirements.
Preferred Qualifications
• A tertiary-level qualification from an internationally recognized institution
• Industry-recognized certifications in CIPP, DAMA, CDPSE (Certified Data Privacy Solutions Engineer), or CGEIT (Certified Governance of Enterprise IT)
Years & Nature of Experience
• Would have 8 to 10 years of equivalent experience in the data privacy management field.
• As an individual contributor, would be the subject matter expert for a capability area or key process in their organization and would typically be the person to lead design work in their area
• Has led technical process areas; excels at leading teams and worked effectively with other areas and stakeholders outside their function
• If a manager of others has impacted team culture through their work
• Has demonstrated ability to link technical contribution back to business impact for their team or area
• Extensive Knowledge of KSA Personal Data Protection Law, particularly in consent, data subject rights, and sharing data across jurisdictions.
• Experience in data mapping and classification to identify the types of data collected, processed, and shared.
Technical Competencies
• Data Security and Protection
• Data Architecture
• Data Management
• Data Engineering
• Data Resiliency
• Regulatory Compliance
Behavioural Competencies
• Well-Spoken & Presentable
• Adaptability
• Analytical thinking
• Complex Reasoning
• Trust and Transparency Key Interactions Internal
• Information Security Function
• Data Management Function
• Risk Management Function
• Compliance Function
• IT Function
• Legal Function
• Internal Audit
Key Interactions External
• Regulators (SAMA, NDMO, NCA, etc)
• 3rd party service providers
• External Auditors Oversee D360 s RoPA register and ensure that all processing activities are captured.
Oversee the data mapping exercise and quality check the data flows maps for accuracy.
Provide inputs into suitable data retention requirements for personal data, and ensure retention periods are applied and followed across D360.
Assess and validate security controls captured during the RoPA excise and ensure they maintain the confidentiality, integrity, and availability of personal data across the bank.
Manage and oversee customer and employee consent requests and ensure they are fulfilled in line with the KSA PDPL.
Ensure appropriate legal basis for processing personal data is recorded as part of the RoPA activity.
Ensure compliance of cookies is maintained.
Oversee Data Subject Requests and ensure they are resolved in line with KSA PDPL.
Continuously review personal data breach management policies and monitor for personal data breaches to ensure associated risks are managed and notifications to the relevant regulator made.
Development of a Data Privacy related Risk Appetite statement.
Support and provide input on completing Data Privacy Impact Assessments (DPIA) for high risk processing activities.
Monitor and maintain a third party list where personal data is being shared outside of D360.
Review existing contracts with third parties to identify the involvement of personal data processing and ensure the data privacy clause is embedded in the contracts aligned with the applicable jurisdictional privacy regulations.
Ensure that the contracts which involve the processing of personal data include provisions governing that processing and, where applicable, provisions ensuring appropriate safeguards when Personal Data is transferred out of any jurisdiction(s).
Identify and drive mitigation plans for the privacy-related risks stemming from the use of third parties.
Lead the data sharing mandate under NDMO for D360 and report directly to DPO on the initiatives, compliance with NDMO standard, awareness campaigns and risks associated with publishing open data.
Conduct the Data Sharing training for every employee involved in the Data Sharing initiatives to ensure that they understand their obligations, responsibilities and the consequences of an unauthorized disclosure or mishandling of data.
Develop and enforce a Data Sharing Process and Data Sharing Agreement
Define and follow an Internal Data Sharing agreement template to be used when data is shared within D360.
Review all ongoing Data Sharing agreements on a regular basis to accommodate for any changes.

Company Industry

• Banking
• Broking

Department / Functional Area

• Finance
• Treasury

Keywords

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at

People Looking for Senior Manager - Privacy & Protection (DPO) - Risk Management Jobs also searched