Data Protection Officer

Date Posted: 17 August, 2026

Industry: IT Services and IT Consulting

Location: VAPORVM IT SERVICES DMCC

Job Description:

• Own Bank’s privacy

  program end-to-end, covering PDPL, SAMA Cyber Security Framework, NDMO

  controls, and applicable cross-border requirements such as GDPR for

  correspondent banking relationships.

• Maintain and govern the

  RoPA, data flow maps, retention schedule, and lawful basis register across

  retail, corporate, treasury, and digital channels.

• Lead DPIAs, legitimate

  interest assessments, and privacy-by-design reviews for new products, core

  banking changes, AI/analytics use cases, and third-party integrations.

• Manage data subject

  rights, consent, and complaint handling within statutory timelines, and

  act as the liaison point for SDAIA, SAMA, and internal audit.

• Run third-party and

  outsourcing privacy due diligence, data processing agreements, and ongoing

  vendor monitoring in coordination with procurement and legal.

• Drive privacy incident

  and breach response jointly with SOC and legal, including regulatory

  notification decisions, root cause analysis, and board-level reporting on

  privacy risk and program maturity.