Opportunity at
SallaData Protection Officer (DPO) - PayLink
Salla's PayLink operation wants a Data Protection Officer to run its privacy and data protection programme. The post centres on keeping PayLink aligned with Saudi Arabia's…
Career Tools
About This Role
Salla's PayLink operation wants a Data Protection Officer to run its privacy and data protection programme. The post centres on keeping PayLink aligned with Saudi Arabia's data privacy statute, known as PDPL, its implementing regulations and SAMA requirements. Listed as on-site and full-time, it suits candidates from regulated financial sectors, particularly fintech and payments. The DPO maintains privacy policies, working procedures and retention timetables, and serves as the main channel…
Job Description
Salla's PayLink operation wants a Data Protection Officer to run its privacy and data protection programme. The post centres on keeping PayLink aligned with Saudi Arabia's data privacy statute, known as PDPL, its implementing regulations and SAMA requirements. Listed as on-site and full-time, it suits candidates from regulated financial sectors, particularly fintech and payments.
The DPO maintains privacy policies, working procedures and retention timetables, and serves as the main channel to regulators on data protection topics. Senior leaders receive advice on privacy exposure and legal duties. The officer runs or supervises privacy impact assessments for new products, systems and processes, evaluates privacy hazards from handling personal data, outside vendors and cross-border flows, and builds privacy safeguards into routine work from the outset.
Requests from individuals about their data are handled through procedures this role sets up, alongside the security, legal and technology staff, so answers arrive on time. Breach handling and privacy incident response fall to the DPO too, as do keeping compliance records and audit evidence and running employee privacy awareness training. Partnering with the legal, compliance, cyber, technology, product and commercial units is a core part of the role.
Candidates need an undergraduate qualification covering law, information security, cyber, compliance or IT, plus practical work in data protection, privacy or regulatory compliance. Grounded knowledge of the PDPL and its implementing rules, and comprehension of SAMA requirements for banks, payment providers and fintechs, are needed. Writing privacy frameworks, conducting PIAs and risk reviews, and maintaining records of processing are expected, as is experience with DSAR and breach handling. English at a professional level is required, Arabic is strongly favoured, and CIPP/E, CIPM or CIPP/A certifications count in the candidate's favour.
Responsibilities
- Build and maintain the privacy and data protection compliance framework under the PDPL and SAMA requirements
- Act as the principal liaison with regulators on privacy questions
- Counsel executives about privacy exposure and steps to improve compliance
- Write and maintain privacy policies, retention schedules and internal guidelines
- Run or oversee privacy impact assessments for new products, systems and processes
- Manage data subject request processes and responses to breaches and privacy incidents
- Run staff training that raises privacy awareness
- Keep compliance documentation and audit evidence up to date
Requirements
- Undergraduate study covering law, infosec, cybersecurity, compliance or IT
- Practical record in data protection, privacy or regulatory compliance work
- Working command of the PDPL and the rules that implement it
- Understanding of SAMA requirements for financial institutions and payment providers
- Experience developing privacy policies and data protection frameworks
- Practical experience with privacy impact assessments and records of processing activities
- Experience managing data subject requests and privacy incidents
- Professional English
Qualifications
- CIPP/E, CIPM or CIPP/A certification, which is preferred
- Arabic proficiency, which is highly preferred
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role located?
The listing is marked on-site and full-time, but it does not name a city.
Which laws does the role cover?
The role covers PDPL, its implementing rules and the SAMA requirements that apply to it.
Is Arabic required?
No. Arabic is highly preferred, while professional English is required.
Are certifications needed?
CIPP/E, CIPM and CIPP/A are preferred, but the posting does not make them mandatory.
Is a salary stated?
The posting does not state a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.