Manager - Data Legal Advisory

Join Qiddiya Investment Company as a Manager - Data Legal Advisor and take a leading role in ensuring that our data management practices comply with evolving legal and regulatory standards. In this critical position, you will evaluate data-related legal issues and provide strategic advice that supports our business objectives while safeguarding our data assets.

Responsibilities

• Lead legal reviews of data-related contracts, vendor agreements, and partnerships.
• Ensure all contracts include legally enforceable data protection, privacy, and security clauses. Provide legal consultation on data-related policies, procedures, and compliance frameworks.
• Serve as legal support for data regulatory compliance efforts, ensuring contractual language aligns with PDPL, GDPR, and other national & global laws.
• Oversee legal risk assessments related to data usage, processing, and storage.
• Ensure legal compliance in cross-border data transfers and jurisdiction-specific obligations.
• Provide legal representation in regulatory discussions, audits, and investigations related to data governance.
• Define legal procedures for data breach response, ensuring compliance with notification and reporting obligations in accordance with the national & global laws.
• Support incident response teams in handling legal aspects of data breaches, including remediation strategies. Provide data legal expertise to Qiddiya’s subsidiaries, affiliates, and partner organizations.
• Ensure harmonization of data-related legal requirements across Qiddiya and its subsidiaries and affiliated/sisters companies. Stay updated on legal and regulatory changes, aligning Qiddiya’s data-related legal requirements.

• 8+ years of experience in data protection law, and regulatory compliance.
• Certifications: CIPP, CIPM, IAPP, ISO 27701. Deep knowledge of national & global data laws, and emerging regulatory frameworks.
• Bachelor's degree in a relevant field is required; a Master's degree is a plus.
• Ability to interpret and draft legal language for policies, regulatory filings, and government reporting.
• Expertise in legal risk management for data.
• Experience drafting and negotiating (DPAs), (SCCs), and legal safeguards for data protection.