مسؤول حماية البيانات

Job Purpose

Support the implementation and day-to-day operation of the Company's data protection and privacy program. The role is responsible for maintaining privacy records, assisting in compliance with the Egyptian Personal Data Protection Law (PDPL - Law No. 151 of 2020), supporting privacy risk assessments, handling data subject requests, and contributing to data protection awareness initiatives in accordance with applicable regulations and company requirements.

Key Responsibilities

• Records of Processing Activities (ROPA):
  • Maintain and update Records of Processing Activities (ROPA) to ensure accuracy, completeness, and consistency.
  • Coordinate with business functions to collect and document information related to personal data processing activities.
  • Maintain proper documentation and records in accordance with regulatory and internal requirements.
• Privacy Assessment:
  • Assist in the preparation and maintenance of Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs).
  • Gather relevant information from stakeholders and document assessment outcomes.
  • Track remediation actions and follow up on agreed corrective measures.
• Compliance Monitoring:
  • Support reviews of policies, procedures, and operational practices related to data protection, data retention, data classification, and data handling.
  • Monitor compliance activities and maintain action trackers for identified findings and recommendations.
  • Escalate potential privacy risks and compliance issues to management when required.
• Privacy Controls & Safeguards:
  • Assist in evaluating the effectiveness of privacy controls and data protection safeguards.
  • Support reviews of access management, data handling practices, and data protection requirements.
  • Participate in monitoring activities aimed at reducing privacy and personal data protection risks.
• Awareness & Training
  • Coordinate privacy awareness campaigns and training sessions.
  • Maintain training records and monitor employee participation.
  • Support the development and distribution of privacy awareness materials.

• 2. Regulatory & Data Subject Relations

  • PDPC Liaison: Act as the registered, and official point of contact between the company and the Egyptian Personal Data Protection Center (PDPC), managing regulatory communications, inquiries, audits, and compliance-related engagements.

  · Breach & Reporting: Ensure timely reporting of personal data breaches to the PDPC in accordance with regulatory requirements, while leading root cause analysis and coordinating corrective action plans to address identified gaps and prevent recurrence.

  • Rights Resolution: Maintain secure channels to receive and resolve employee data subject requests and complaints within legally mandated timeframe.
• Job Requirements
  • Accreditation: Undertake to successfully pass the required examinations mandated by the relevant regulatory authority
  • Official Registry: Must have, or undertake to obtain, active registration in the Data Protection Officer (DPO) Registry maintained by the Egyptian Personal Data Protection Center (PDPC).
  • Education: University degree (preferably in Law, Computer Science, Cybersecurity, or Business).
  • Experience: 3 to 5 years of proven experience in data privacy, cybersecurity, compliance, or corporate governance (senior consultancy background are preferred).
  • Certifications (Preferred): Recognized credentials (e.g., IAPP, ISC2, PECB, or equivalent ISO certifications).