This position main purpose is responsible for implementing data privacy projects and programs, implementing data privacy, policies, and other documents within NMC; consulting NMC personnel on data privacy issues; leading and coordinating operation of the Data Privacy Department
• *Accountabilities**
- Develop and implement data privacy policies, documents, programs and projects.
- Define and develop solutions related to issues and problems that are not immediately evident in existing systems or processes in regards to Data Privacy.
- Arrange measures necessary for NMC to comply with its data privacy policies and applicable data privacy regulations in KSA and in other countries, where necessary, e.g. in the UAE.
- Monitor developments in privacy legislation and to ensure that all such developments are taken into account by NMC.
- Manage data breaches and handle data breach notifications and provide solutions.
- Inform relevant stakeholders about any data breach with recommended actions.
- Manage data owners’ requests.
- Prepare and conduct training and awareness programs, as well as training and awareness materials (in cooperation with HR Department).
- Provide feedback to stakeholders in regard to data privacy trainings (needs, reports, trends, attendance and recommendations)
- Maintain an updated record of processing activities (RoPA).
- Act as an advisor and key point of contact on all matters related to data privacy within NMC.
- Ensure that data privacy is embedded in all technologies implemented in NMC.
- Conduct data privacy impact assessments and test the system against the standard level and come up with solutions consistent improvements.
- Align on agreed actions to be taken in regards with the Data Privacy Impact Assessments with the relevant stakeholders and ensure on its implementation.
- Organize operation of the Data Privacy Steering Committee.
- Prepare regular reports for Data Privacy Steering Committee regarding NMC’s data privacy capabilities.
- Ensure that agreed actions of the Data Privacy Steering Committee are met within a timely matter.
- Monitor data privacy KPIs and ensure meeting their targets.
- Set privacy objectives and requirements and communicate them to NMC’s departments.
- Lead and launch Data Privacy Campaigns to raise awareness and guidance of NMC employees.
- Communicate and influence stakeholders from other departments to abide by data privacy procedures.
Employee duties are not limited only to the above-mentioned Accountabilities; he/she may perform other duties as assigned.
• *Work Environment**
- Indoors : 90%
- Outdoors : 10%
- Working Days : 5 Working Days
- Days off : 2 Days Off
- Working Hours : 8:00 AM - 6:00 PM (1 hour break)
• *Job Requirement**
Education
- BSc in Information Technology or related disciplines
Experience
- 3-6 Years of Experience
- Certification in IAPP (CIPP/E, CIPM, CIPT) is a plus
Computer Skills
- MS Office Suite
Language
- English
- Arabic
