Senior Cybersecurity Specialist.Cybersecurity Testing and Operations Department

Job Purpose

To safeguard sensitive and personal data processed by the Saudi Commission for Health Specialties by implementing and governing advanced data protection, data loss prevention, and privacy-by-design controls across enterprise and AI-enabled systems, ensuring full compliance with PDPL, NCA requirements, and national data governance mandates.

Duties & Responsibilities

• Design, implement, and continuously tune data leakage detection and prevention controls using DAM, DLP, and data classification technologies.

• Conduct Data Protection Impact Assessments (DPIA) for AI systems processing Saudi personal data and maintain regulatory documentation.

• Enforce encryption, tokenization, and data masking controls in compliance with NCA-ECC before data is used in analytics or AI environments.

• Review and assess data processing agreements with AI vendors and third parties, ensuring cross-border data transfer compliance.

• Lead advanced data leakage investigations, identify recurrence patterns and root causes, and recommend corrective actions.

• Coordinate with Incident Response, IAM/PAM, Application, and Data Governance teams during data security incidents.

• Integrate data security platforms with SIEM, IAM/PAM, and EDR systems to enhance monitoring and detection capabilities.

• Execute periodic data leakage simulations and scenario-based testing.

• Perform pre-go-live data protection reviews for new systems prior to production deployment.

• Prepare executive and stakeholder reports on data exposure, risks, and compliance posture.

• Practical experience with at least one enterprise DLP/DAM platform (e.g., Forcepoint, Microsoft Purview, Symantec, Imperva).

• Solid understanding of databases, operating systems, and data flows.

• DLP vendor certification.

• CISSP, CCSA, CCSE. (Preferred)

• Ability to prepare and maintain Records of Processing Activities (ROPA) for AI systems.