Data Privacy Assistant (Outsourced)

Job Objectives

Key Responsibilities

• Assist the DPO in implementing and maintaining the data privacy program, policies, and procedures.
• Conduct data inventory and mapping activities to identify personal data processed by the Bank.
• Support the execution of Privacy Impact Assessments (PIA / DPIA) for new projects and systems.
• Monitor compliance with privacy requirements across departments and third-party vendors.
• Assist in handling Data Subject Access Requests (DSARs) and ensuring timely responses.
• Help investigate and document any personal data breaches and support incident response coordination.
• Maintain privacy documentation such as data registers, consent records, and processing logs.
• Assist in developing and delivering privacy awareness training to employees.
• Collaborate with IT Security and Legal teams to ensure alignment between data protection and cybersecurity controls.
• Support audits and assessments related to privacy compliance (internal and external).
• Liaise with internal departments, the external consultants, and relevant external parties (e.g., QCB, Data Privacy Office(MOI) , auditors).
• Support awareness sessions, workshops, and communication initiatives to promote Data Privacy culture across the Bank.
• Draft and edit internal communications, memos, and reports in both Arabic and English.
• Collaborate to integrate Data Privacy -related risk considerations into the Bank’s risk management processes.
• Track and follow up on Data Privacy KPIs and progress indicators.
• Coordinate with Cybersecurity to ensure data protection across systems and environments.
• Monitor compliance of cloud service providers and vendors, ensuring DPAs are in place.

• Cybersecurity And Risk Management

Experience

• 3–5 years of experience in data privacy, compliance, cybersecurity, or risk management.
• Experience in banking or other regulated financial environments preferred.
• Familiarity with data protection in cloud and third-party systems.

Preferred Certifications

• At least one of the following certifications(is additional ) :

• CIPP And E, CIPM (IAPP)

• CDPSE, CISM , CRISC (ISACA)

Skills And Competencies

• Understanding of data protection laws (Qatar Law No. 13 of 2016, GDPR).
• Strong analytical and organizational skills.
• Excellent written and verbal communication abilities.
• Attention to detail and confidentiality awareness.
• Ability to coordinate across departments and with external stakeholders.

Applicable Standards And Regulations

• Qatar Personal Data Privacy Law (Law No. 13 of 2016)

• Qatar Central Bank Cybersecurity Framework

• ISO/IEC 27701 – Privacy Information Management System (PIMS)
• GDPR – General Data Protection Regulation (EU)

• NIST Privacy Framework