Job Openings DATA PRIVACY EXPERT

About the job DATA PRIVACY EXPERT

About the Role Duncan & Ross is retained by a leading petrochemical client on Saudi Arabia's Eastern Coast to source a senior Data Privacy Expert for a 5-month on-site engagement. You will lead the client's data privacy programme — ensuring full compliance with Saudi Arabia's Personal Data Protection Law (PDPL), the client's parent company privacy requirements, and relevant international standards. This is a senior advisory and implementation role requiring both strategic vision and practical delivery.

What You'll Do

  • Lead the design and implementation of the client's enterprise data privacy programme
  • Ensure compliance with Saudi Arabia's PDPL, SDAIA guidance, and the client's parent company privacy frameworks
  • Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) across key business processes and systems
  • Develop and maintain privacy policies, notices, consent frameworks, and data subject rights procedures
  • Identify and remediate privacy risks across the data estate — including third-party and vendor relationships
  • Define data retention, deletion, and anonymisation standards
  • Train and advise internal stakeholders on privacy obligations and best practices
  • Liaise with legal, compliance, IT, and business leadership to embed privacy by design
  • Advise on cross-border data transfer controls and third-party data sharing agreements

What We're Looking For

  • 10+ years of experience in data privacy, data protection, or privacy law
  • Deep knowledge of Saudi Arabia's PDPL and SDAIA regulatory framework — essential
  • Broader international privacy expertise (GDPR, CCPA, or equivalent) highly valued
  • Experience advising large, complex organisations — energy, industrial, or government-aligned sectors preferred
  • CIPP, CIPM, CIPT, or equivalent privacy certification strongly preferred
  • Ability to engage and advise at General Counsel, DPO, and C-suite level
  • Familiarity with major national energy company privacy and compliance standards in the Gulf region is a strong advantage


Vertical: 

Technology