Data Privacy Lawyer - PDPL Compliance

Saudi Telecom Company (stc) is looking for a Data Privacy Lawyer to lead PDPL (Personal Data Protection Law) compliance across our operations in Saudi Arabia and the wider MENA region.

Role Overview

Saudi Arabia's Personal Data Protection Law (PDPL), enacted in 2023, represents one of the most significant regulatory developments in the Kingdom's digital economy. As the largest telecom provider in the Middle East, stc handles vast amounts of personal and sensitive data. You will lead the company's data privacy program, ensure PDPL compliance, and advise on emerging data regulations including data localization, cross-border transfer requirements, and cybersecurity standards set by the National Data Management Office (NDMO).

Key Responsibilities

• Lead stc's PDPL compliance program across all business units and subsidiaries
• Conduct data protection impact assessments (DPIAs) for new products and services
• Advise on cross-border data transfers, data localization requirements, and NDMO regulations
• Draft and review privacy policies, data processing agreements, and consent mechanisms
• Coordinate with CITC (Communications, Space and Technology Commission) on regulatory inquiries
• Train internal teams on data privacy obligations and incident response procedures

What We Offer

• Opportunity to shape data privacy at the region's largest telecom company
• Competitive salary and technology sector benefits
• Flexible work arrangements
• Continuous learning and certification support (CIPP/M, CIPM)

• LLB from a recognized university; LLM or certification in data privacy/information law preferred
• 4-7 years of data privacy law experience, ideally in telecoms or technology sectors
• Strong knowledge of Saudi PDPL, NDMO regulations, and international frameworks (GDPR familiarity a plus)
• CIPP/M, CIPP/E, or CIPM certification preferred
• Experience with data protection impact assessments and privacy-by-design frameworks
• Fluent in Arabic and English