Nair Systems is currently looking Data Privacy and Records Officer for our Qatar operations with the following terms & conditions.
Experience
• 6–10 years total, including 3+ years in privacy/records or information governance within
financial services/insurance; strong policy/documentation track record.
• Certifications are a plus (CIPM/CIPP, ISO 27701/27001, ITIL).
Mandatory knowledge
• Qatar PDPL and QCB Data Handling & Protection.
• Privacy by design (PIA/DPIA), ROPA, data-subject rights, DPAs/contract controls.
• Records/information governance: retention schedules, legal holds, defensible disposal.
• Basic InfoSec & controls alignment (e.g., ISO/IEC 27001/27002; awareness of 27701).
• Insurance data flows (underwriting, claims—incl. medical, motor, reinsurance, HR, finance,
• marketing consent).
Skills & competencies
• Regulatory interpretation & application Turns QCB/PDPL rules into clear policies, processes, and evidence trails.
• Privacy program leadership
• Runs PIAs/DPIAs, ROPA/data mapping, DSAR workflows; sets KPIs and reports to executives/Board.
• Records & retention governance Builds retention schedules, legal holds, and audit-ready documentation; coordinates defensible disposal.
• Incident management Leads breach assessment/notification; runs tabletop exercises; closes actions promptly.
• Third-party & contract governance Runs privacy due diligence; drafts/negotiates DPAs; tracks cross-border transfers.
• Policy governance & writing Owns the policy library; maintains EN/AR versions; drives approvals and staff acknowledgements.
• Stakeholder influence & communication Works credibly with CEO/Board, Compliance, CISO/IT, Legal, HR, Motor/Medical; clear, concise reporting.
• Data mapping & tooling Comfortable with privacy/records tools, DMS/ECM, and Excel/BI for dashboards.
Languages
• English (required); Arabic (preferred).
Joining time frame: 2 weeks (maximum 1 month)
Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest at