PDPL Consultant

Contract | 3-6 Months | Outside IR35
Remote

I am looking for a seasoned Data Protection professional to support Saudi-based clients with their Personal Data Protection Law (PDPL) compliance initiatives, ensuring alignment with local regulatory requirements and best practices.

Responsibilities:

• Lead and support client engagements focused on PDPL readiness, implementation, and compliance.

• Conduct data protection impact assessments (DPIAs) and gap analyses in line with PDPL requirements.

• Develop and implement PDPL-aligned privacy policies, procedures, and governance frameworks.

• Advise on lawful bases for processing, cross-border data transfers, data subject rights, and consent management.

• Deliver PDPL training and awareness sessions for staff and key stakeholders across the organisation.

• Provide strategic and operational guidance to clients' privacy and compliance teams.

• Collaborate with legal, IT, and security teams to embed PDPL into business-as-usual operations.

Background & Experience:

• 5+ years of experience in data protection, privacy compliance, or information governance.

• At least 1 year of hands-on experience delivering PDPL compliance programmes in Saudi Arabia.

• Strong understanding of global privacy frameworks (e.g., GDPR, CCPA) and how they intersect with PDPL.

• Experience conducting training and awareness sessions for stakeholders at all levels.

• Professional certifications (e.g., CIPP/E, CIPM, CDPO, IAPP) are advantageous.