Job Description:
- Own Bank’s privacy
program end-to-end, covering PDPL, SAMA Cyber Security Framework, NDMO
controls, and applicable cross-border requirements such as GDPR for
correspondent banking relationships. - Maintain and govern the
RoPA, data flow maps, retention schedule, and lawful basis register across
retail, corporate, treasury, and digital channels. - Lead DPIAs, legitimate
interest assessments, and privacy-by-design reviews for new products, core
banking changes, AI/analytics use cases, and third-party integrations. - Manage data subject
rights, consent, and complaint handling within statutory timelines, and
act as the liaison point for SDAIA, SAMA, and internal audit. - Run third-party and
outsourcing privacy due diligence, data processing agreements, and ongoing
vendor monitoring in coordination with procurement and legal. - Drive privacy incident
and breach response jointly with SOC and legal, including regulatory
notification decisions, root cause analysis, and board-level reporting on
privacy risk and program maturity.