About the job

Group Data Protection Officer (DPO)

Holding Company

Jeddah, Saudi Arabia

The Opportunity

TSC is partnering with a leading holding company to appoint a Group Data Protection Officer (DPO) who will lead the Group's enterprise-wide data privacy and protection framework.

This is a strategic leadership role responsible for ensuring compliance with the KSA Personal Data Protection Law (PDPL). The successful candidate will serve as the Group's primary privacy advisor, driving governance, regulatory compliance, and a strong data protection culture throughout the organization.

About the role

• Lead the implementation and continuous monitoring of the Group's data privacy framework in line with the KSA PDPL.
• Act as the primary point of contact with SDAIA and coordinate regulatory communications and compliance initiatives.
• Oversee Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).
• Advise business and technology teams on Privacy by Design principles and privacy risk management.
• Coordinate personal data breach response activities and regulatory notifications where required.
• Drive consistency across subsidiary DPOs and strengthen enterprise-wide privacy governance.
• Promote a culture of data privacy through awareness, training, and engagement initiatives.
• Provide regular reporting and strategic recommendations to senior leadership on privacy risks and compliance.

Key Requirements

The successful candidate will combine strong regulatory expertise with the ability to influence senior stakeholders across a complex group structure.

You will demonstrate:

• 8+ years of experience in data protection, privacy, legal, compliance, or risk management.
• Hands-on expertise in the KSA PDPL, its Implementing Regulations, and SDAIA/NDMO requirements.
• Strong knowledge of privacy operations, including RoPA, DPIAs, breach management, Data Subject Rights, and cross-border data transfers.
• Familiarity with international privacy and security frameworks such as GDPR and ISO 27001.
• Experience operating within a multi-entity or holding company environment is highly preferred.
• Bachelor's degree in Law, Information Governance, Cybersecurity, Information Technology, or a related discipline, with a recognized privacy certification considered an advantage.
• Fluency in both Arabic and English, with excellent stakeholder management and communication skills.