Data Privacy and Governance Lead Alfalak Electronic Equipment & Supplies Co.

Data Security

▪ Perform all activities related to developing and enforcing data security procedures, general instructions, and admin procedures in line with Company goals and compliance requirements.

▪ Collaborate with cross-functional teams to protect a defined data asset inventory.

▪ Collaborate with all internal departments to ensure data security best practices are integrated throughout the organization.

▪ Perform all activities related to training and awareness programs execution to educate employees on data security practices and the importance of protecting classified information.

▪ Perform all activities related to the selection and implementation of data security tools and technologies to enhance our security posture.

▪ Perform all activities related to monitoring industry trends, threats, and best practices in data security to keep our policies and procedures up to date.

▪ Provide expert advice and guidance on data security matters to senior management and other key stakeholders.

Identity and Access Management

▪ Collaboration with data owners to define and establish access controls for classified data resources.

▪ Perform all activities related to conducting and coordinating reviews of access controls and permissions for classified data resources.

▪ Review all activities related to the process for granting, modifying, and revoking access to data resources, ensuring that these actions are performed in line with established policies and are authorized by the respective data owners.

▪ Supervision of activities related to Data Leakage Prevention (DLP), and Rights Management Services (RMS) to prevent data breaches.

▪ Manage all activities related to monitoring user access review activities across JCD data systems.

Data Privacy

▪ Perform all activities related to the development and implementation of processes for efficiently handling data subject requests, such as access, rectification, deletion, etc...

▪ Collaboration with all departments to ensure data privacy best practices are integrated throughout the organization.

▪ Perform and lead the process of conducting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new and existing projects, systems, or processes, and before launching new systems or projects..

▪ Manage all activities related to the organization's data breach response and notification procedures, ensuring a timely and coordinated response to any data privacy incidents in line with PDPL requirements.

▪ Manage vendor privacy risks and ensure contracts include proper data protection requirements.

▪ Collaborate with IT and business lines to safeguard personal data.

▪ Maintain, review, and update the Record of Processing Activities (RoPA).

▪ Monitor privacy KPIs and prepare periodic reports for leadership.

▪ Support audits and demonstrate compliance with PDPL and all relevant regulations.

Data Governance

▪ Develop, implement, and maintain the data governance framework, including policies, standards, and procedures.

▪ Collaborate with data stewards, business users, IT, and compliance teams to define data ownership and stewardship responsibilities.

▪ Monitor data quality and integrity across critical business systems; recommend corrective actions where necessary.

▪ Support metadata management and data catalog initiatives.

▪ Assist with regulatory and compliance data requirements (e.g., NCA DCC, PDPL, ISO 27701,…etc).

▪ Facilitate Data Governance Council meetings and report on KPIs and governance metrics.

▪ Provide training and communication to promote data governance awareness and best practices across departments.

▪ Participate in data classification, access control, and data lineage initiatives.

▪ Help select and implement data governance tools and technologies.