Job Description

Roles & Responsibilities

The Data Protection Officer (DPO) will oversee the bank’s compliance with data privacy regulations such as QCB guidelines, NCSA directives, and global standards.
They will ensure personal and sensitive data is processed lawfully, securely, and transparently across all systems and third parties.
The DPO will manage data subject rights, breach handling, and cross-border data transfer governance.
They will embed privacy by design into digital transformation and new product initiatives.
The role includes monitoring internal policies, conducting DPIAs, and maintaining privacy records (RoPA).
Above all, the DPO will act as the custodian of trust, protecting the bank from regulatory, legal, and reputational risks

Desired Candidate Profile

· Knowledge of Departmental Priorities, Products, and QDB’s Strategic Data Governance Objectives (2)

· Thorough Understanding of QCB, NCSA, and Global Data Privacy Regulations (e.g., Law No.13 of 2016, GDPR-equivalents) (3)

· Privacy and Data Protection Management (e.g., DPIAs, RoPA, Consent Management, Breach Handling) (3)

· Data Governance Tools and Frameworks

· Experience with the Following Platforms or Domains:

· Data Discovery & Classification Tools (e.g., Microsoft Purview, Varonis)

· Consent & Preference Management Solutions

· Data Loss Prevention (DLP) Policies Aligned with Privacy Controls

· SIEM Monitoring for Privacy Incident Correlation

· Audit Logging & Data Access Monitoring Solutions (e.g., UEBA, DAM)

· Privacy Impact Assessment Platforms and Workflow Tools

· Strong Microsoft Office Proficiency (Word, Excel, PowerPoint) for Documentation and Reports

· Ability to Draft High-Quality Privacy Reports, DPIAs, and Compliance Briefs

· Effective Public Speaking and Presentation Skills for Organization-wide Privacy Awareness Campaigns

· Sharp Analytical Thinking and Problem-Solving Skills in Privacy Risk Scenarios

· Collaborative and Adaptive Mindset Across Legal, IT, and Business Units

· Ability to Translate Legal and Regulatory Privacy Requirements into Simple, Actionable Language for Non-Technical Stakeholders

8. Qualifications & Experience

Required Qualifications: *

· University degree with specialization in Cybersecurity or IT or Computer Science

· Technical Certifications: Offensive Security Professional certifications / Any SANS Certifications such as OSCP, OSCE, GCIH, GPEN, GNFA

· Domain Certifications: CIPM/CIPE/CIPP (mandatory)

Mandatory Experience:

· Minimum 8-10 years of security & privacy experience of which a minimum of 2-3 years should be in a similar position / responsibility.

Data Privacy and Protection Officer Techmantra Gulf DMCC