Role Objective

The incumbent will perform activities pertaining to Data Privacy across Doha Bank, in line with policies, procedures and applicable Data Privacy laws and regulations. The incumbent will support in development and implementation of the bank’s Data Privacy Program, ensure data compliance through relevant mechanism, and impart staff training in close coordination with the relevant stakeholders.

Detailed Roles and Responsibilities:

• Perform all activities as assigned by the reporting authority, in compliance with the local regulations and Doha Bank’s approved policies and procedures.
• Assess and monitor the bank’s compliance with applicable data privacy and protection regulations.
• Provide advice and guidance to business units on matters relating to data privacy, data protection, and the appropriate handling of personal data.
• Provide periodic update, at least on an annual basis, to the senior management including but not limited to CRO or CEO on data privacy activities, compliance status, key issues, and areas requiring management attention.
• Develop, implement, update and maintain Doha Bank’s Data Privacy policies and procedures
• Work closely with the relevant stakeholders in implementation of the Data Privacy policies, procedures and notices across the Bank.
• Assist the Data Privacy Champions and other stakeholders in maintaining and updating Record of Processing Activities (ROPAs)
• Perform Data Privacy Impact Assessment of the bank’s business process where personal data of the staff, customers, vendors, etc. are involved.
• Coordinate with relevant stakeholders to ensure all business processes adhere to internal Data Privacy policies and procedures.
• Coordinate with relevant stakeholders to ensure all Information Assets containing personal data adhere to internal Data Privacy policies and procedures.
• Establish a mechanism to identify, assess, remediate, monitor, and report (as applicable) on privacy risks and incidents and perform systematic audits.
• Review and provide feedback Data Privacy requests and queries such as but not limited to customer rights fulfillment, data sharing, etc.
• Conduct monthly Data Privacy awareness training and periodic communications to the staff.
• Assist in preparing and implementing the Data Privacy strategy of the bank.
• Maintain an understanding of all pertinent regulations as well as leading practices pertaining to the overall operation of the Data Privacy area.
• Support reporting authority in on ground implementation of the procedural control measures identified through audit, risk and compliance observations.
• Perform RCSAs of Data Privacy related areas and Vendor Risk Assessments in line with regulatory requirements.

Educational Qualifications and Experience:

• University graduate with a degree in Computer Science, Computer Engineering, Information Security or any other related discipline.
• 06-10 years of total experience in financial services/banking industry, entailing responsibilities pertaining to the specific area of discipline.
• Previous experience in Data Privacy /Data Protection or data compliance in financial services industry.