Data Protection Officer (DPO)

Role Purpose : To lead and oversee Cenomi Centers’ personal data protection compliance program, ensuring compliance with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and applicable SDAIA requirements. Role Responsibilities : 1. Oversee PDPL compliance across all business functions. 2. Maintain Records of Processing Activities (ROPA) and oversee Data Protection Impact Assessments (DPIA). 3. Monitor personal data processing, sharing, retention, and protection practices. 4. Advise on data subject rights, third-party data processing arrangements, and personal data breaches. 5. Coordinate with SDAIA and relevant internal stakeholders. 6. Develop and monitor data protection policies, procedures, awareness and training programs, and compliance reporting. 7. Provide independent professional advice and escalate material data protection risks to the appropriate management level. 8. Perform added roles and tasks as per management needs. Role Requirements : • Bachelor's degree in Law, Information Systems, Cybersecurity, Information Technology, or a related field. • Minimum 5 years of relevant professional experience, including at least 2 years in personal data protection or privacy compliance. • Practical knowledge of Saudi PDPL, its Implementing Regulations, and SDAIA requirements. • Hands-on experience with ROPA, DPIA, personal data breach management, and privacy risk assessments. • Strong communication and stakeholder management skills. • Proficiency in Arabic and English. • Professional data privacy certifications such as CIPP, CIPM, CIPT, or equivalent. • Previous experience serving as a DPO or implementing an organization-wide PDPL compliance program. • Familiarity with ISO/IEC 27701 and ISO/IEC 27001

Bachelor's degree in Law, Information Systems, Cybersecurity, Information Technology, or a related field. Minimum 5 years of relevant professional experience, including at least 2 years in personal data protection or privacy compliance. Practical knowledge of Saudi PDPL, its Implementing Regulations, and SDAIA requirements. Hands-on experience with ROPA, DPIA, personal data breach management, and privacy risk assessments. Strong communication and stakeholder management skills. Proficiency in Arabic and English. Professional data privacy certifications such as CIPP, CIPM, CIPT, or equivalent. Previous experience serving as a DPO or implementing an organization-wide PDPL compliance program. Familiarity with ISO/IEC 27701 and ISO/IEC 27001

Oversee PDPL compliance across all business functions. Maintain Records of Processing Activities (ROPA) and oversee Data Protection Impact Assessments (DPIA). Monitor personal data processing, sharing, retention, and protection practices. Advise on data subject rights, third-party data processing arrangements, and personal data breaches. Coordinate with SDAIA and relevant internal stakeholders. Develop and monitor data protection policies, procedures, awareness and training programs, and compliance reporting. Provide independent professional advice and escalate material data protection risks to the appropriate management level. Perform added roles and tasks as per management needs.