Data Protection Officer (DPO) – Lead PDPC Framework

About the role

We are building a data protection framework from the ground up in preparation for Egypt’s Personal Data Protection Center (PDPC) registry. The Data Protection Officer will lead the creation and implementation of this framework, reporting directly to the CEO and operating independently from processing decisions.

Key responsibilities

• Build and maintain the Record of Processing Activities (RoPA).
• Manage the PDPC licensing file, including core license and cross‑border transfer documentation.
• Operate the 72‑hour breach notification process.
• Serve as the primary contact for data subjects and the PDPC.
• Review and adapt consent frameworks for health data and minors.
• Govern the use of AI‑related data within the organization.
• Negotiate and oversee Data Processing Agreements (DPAs) with vendors.

Required profile

• 2–3 years of experience in data protection, privacy, compliance or information security.
• International privacy certification (CIPP/E, CIPM, ISC2, PECB or equivalent) or at least 30 documented training hours.
• Relevant degree, preferably in law or computer science.
• Fluent in Arabic and English.
• Preferred background in digital health, insurance or fintech and familiarity with Saudi PDPL.

Required skills