Job description

Personal data protection laws and internal controls define the boundaries of this position, based at a client site in Riyadh for Master Works. You will support the organization in building and maintaining a personal data protection and privacy framework, then keep it current as regulations change. Compliance sits at the heart of the work, and that means monitoring adherence to applicable personal data protection laws, regulations, policies, and standards while flagging gaps to the right teams. Policies, procedures, guidelines, and controls need regular development and review, and this role carries much of that groundwork. Risk identification, assessment, and mitigation feed into the same cycle, alongside the classification, handling, storage, retention, and secure processing of personal data. The role connects Information Security, Risk, Legal, IT, Data Management, and business teams whenever a data protection initiative touches more than one department. Assessing data processing activities, running privacy audits, and reporting on control effectiveness fill out the operational side of the job. Guidance and training go outward too, since stakeholders across the business need practical direction on data protection requirements rather than policy documents alone.