SENIOR PROGRAM MANAGER - PDPL

About the Role

We are seeking a seasoned Senior Program Manager with a strong background in data protection and privacy regulation to lead our PDPL compliance Program in Saudi Arabia. This is a high-impact role sitting at the intersection of regulatory compliance, technology, and business transformation within the financial services sector. The ideal candidate brings hands-on experience delivering GDPR or equivalent privacy frameworks in a consulting environment and is ready to apply that expertise to Saudi Arabia's evolving data protection landscape.

Key Responsibilities

Program Leadership

• Own end-to-end delivery of the PDPL compliance Program , from gap assessment through to full regulatory readiness
• Define Program scope, governance structures, roadmap, and success metrics in alignment with senior stakeholder expectations
• Lead cross-functional working groups across Legal, IT, Operations, Risk, and Compliance to embed data protection requirements into business processes
• Manage Program budgets, resource plans, and interdependencies across parallel workstreams
• Provide oversight and direction to a team of project managers, workstream leads, and subject matter experts operating across the Program

Regulatory & Advisory

• Serve as the internal subject matter lead on PDPL obligations, translating regulatory requirements into actionable Program deliverables
• Monitor regulatory developments from the Saudi Data & AI Authority (SDAIA) and advise leadership on emerging obligations and implementation timelines
• Draw on prior GDPR, CCPA, or equivalent Program experience to benchmark best practices and accelerate delivery
• Liaise with external legal counsel, regulators, and third-party assessors as required

Stakeholder Management

• Build and maintain trusted relationships with C-suite and senior executive sponsors, providing clear and concise Program status reporting
• Manage client or internal stakeholder expectations in a consulting or matrixed environment, navigating competing priorities with diplomacy
• Prepare and present steering committee updates, board-level briefings, and regulatory submissions
• Act as a trusted adviser to senior leadership on Program strategy, regulatory risk, and organizational change

Risk & Controls

• Identify, escalate, and manage Program risks, issues, and dependencies through formal RAID management
• Ensure data protection controls are aligned with the organization's broader risk and compliance frameworks (e.g. SAMA regulations, ISO 27001, NIST)
• Support the design and implementation of data governance frameworks, privacy impact assessments (PIAs/DPIAs), and data subject rights processes

Required Experience & Qualifications

• 10+ years of project management experience, with a significant portion of that career spent in a management consulting environment
• Demonstrable end-to-end delivery of multiple major data protection or regulatory compliance Program (GDPR, CCPA, DIFC Data Protection Law, or equivalent), with at least one in a lead Program manager capacity
• Deep financial services sector experience — banking, insurance, asset management, or payments
• Proven track record managing large, complex, multi-workstream Program with significant budgets and cross-organisational reach in regulated environments
• Demonstrated experience building, leading, and mentoring Program teams including project managers and workstream leads
• Excellent stakeholder management skills with extensive experience engaging at C-suite and Board level
• Formal PM or Program qualification: MSP (Managing Successful Program ), PgMP, or equivalent; PMP or PRINCE2 Practitioner also desirable
• Strong written and verbal communication skills in English; Arabic language skills are a distinct advantage

Preferred Qualifications

• Working knowledge of Saudi Arabia's PDPL and SDAIA regulatory framework
• Certifications in data protection or privacy (CIPP/E, CIPM, CIPT)
• Familiarity with SAMA Cybersecurity Framework and relevant financial services regulations in KSA
• Prior in-Kingdom work experience or a strong understanding of the Saudi business and regulatory environment

Personal Attributes

• A strategic thinker who can operate at the Program level while maintaining visibility of delivery detail
• Highly organized with strong attention to detail and the ability to manage ambiguity in an evolving regulatory environment
• Commercially astute with a consulting mindset — able to deliver value quickly while building long-term capability
• Culturally aware and comfortable operating within a diverse, multinational environment
• Proactive, self-sufficient, and capable of driving a Program forward without close supervision
• A credible and confident communicator who can translate complex regulatory concepts for non-technical audiences and influence at the most senior levels

What We Offer

• Competitive tax-free salary and benefits package
• Opportunity to lead a high-profile, nationally significant compliance Program
• Exposure to senior leadership across a leading financial services institution
• Visa sponsorship and relocation support for international candidates

Vertical:

Technology