About the Role We're building our data protection framework from the ground up, ahead of the opening of Egypt's Personal Data Protection Center (PDPC) DPO registry. We're looking for a DPO who will lead this file from inception, not just execution — reporting directly to the CEO, fully independent, and not involved in processing decisions. Key Responsibilities Building the Record of Processing Activities (RoPA) · managing our PDPC licensing file (core license + cross-border transfer) · running the 72-hour breach notification process · main point of contact for data subjects and the PDPC · reviewing consent frameworks for health data and minors · governing AI data use · managing Data Processing Agreements (DPAs) with vendors. Qualifications Currently classified as Category C under the PDPC's DPO tier framework, with a growth path to Category B. 2–3 years' experience in data protection, privacy, compliance, or information security; an international certification (CIPP/E, CIPM, ISC2, PECB, or equivalent) or 30+ documented training hours; a relevant degree (law or computer science preferred); fluent Arabic and English. Preferred: digital health, insurance, or fintech background; familiarity with Saudi PDPL. Open ToIndependent freelancers · specialized privacy consultancies · DPOs already serving other entities (subject to PDPC pre-approval, conflict-of-interest checks, and record separation). Note The PDPC registry isn't open yet, so prior registration isn't required — only meeting the eligibility criteria, with a contractual commitment to register and sit the exam once the registry opens (company covers the fees). To Apply Send your CV plus a short note on the most relevant compliance project you've led to [Click to show email] (subject: Application for DPO)