Data Protection Officer

Position Overview

We are hiring an experienced Data Protection Officer (DPO) to spearhead data privacy and cross-border data compliance initiatives across the Middle East and Africa (MEA) region. This role will focus on establishing and enforcing data compliance frameworks aligned with regional regulations within the renewable energy sector, especially in solar and energy storage.

Key Responsibilities

• Develop and implement the regional MEA data compliance framework ensuring conformance with legal standards such as Saudi PDPL, UAE PDPL, South Africa POPIA, among others.
• Oversee compliance management related to cross-border data transfers between regional offices and global headquarters, including Transfer Impact Assessments, SCC/DPA evaluations, and export compliance.
• Create and regularly update regional compliance policies, privacy notices, data classification guidelines, and mechanisms for handling data incidents.
• Conduct thorough privacy and security compliance assessments for international systems such as CRM, ERP, OA, and BPM, integrating privacy measures into all business operations.
• Serve as liaison with regional regulatory authorities supporting filings, registrations, audits, and investigations related to data protection.
• Provide expert compliance training and advice to departments including Sales, Human Resources, IT, and other business units.
• Lead activities related to managing data breaches and compliance risks effectively.

Candidate Requirements

• Bachelor's degree or higher in Law, Information Security, Data Compliance, Computer Science, or related disciplines.
• A minimum of 5 to 8 years’ professional experience in data privacy and compliance management, particularly in MEA regional or cross-border data governance roles.
• Expert knowledge of data protection laws such as Saudi PDPL, UAE PDPL, South Africa POPIA, Chinese PIPL/DSL/CSL, and the EU's GDPR.
• Demonstrated experience managing cross-border data transfer compliance, privacy assessments, and regulatory interactions.
• Familiarity with enterprise information systems including CRM, ERP, OA, and BPM platforms.
• Background in internet technology or the renewable energy industry, with preference given to those familiar with solar and energy storage sectors.
• Relevant certifications like CIPP, CIPM, CISSP, or CISP considered advantageous.
• Proficiency in both English and Arabic, with strong communication and documentation skills in both languages.

Preferred Qualifications

• Track record in developing compliance frameworks for overseas subsidiaries within the MEA region.
• Practical experience with data export compliance projects specific to Saudi Arabia and the UAE.
• Knowledge of compliance management software such as OneTrust or Archer.