Data Governance Privacy & GRC Consultant

About Command Post

Command Post is a prominent consulting and technology firm specializing in cybersecurity, AI assurance, governance, risk, compliance (GRC), privacy, and data governance, servicing organizations throughout the Middle East. To support its expanding Data Governance and GRC practice, the company is hiring experienced professionals for positions in Doha, Qatar, and Dubai, UAE.

Available Roles

• Data Governance Lead
• Senior Data Governance Consultant
• Data Governance Consultant
• GRC / Compliance Lead
• Privacy Consultant
• Data Governance Analyst
• Data Steward

Role Summary

The selected individual will contribute to the design, deployment, and ongoing enhancement of enterprise governance, privacy, compliance, and risk management initiatives. Engagement with diverse business and technical stakeholders will be vital to establishing governance frameworks, enhancing data quality, ensuring regulatory compliance, and strengthening organizational controls.

Key Responsibilities

• Develop and deploy comprehensive enterprise data governance frameworks including decision authorities, roles, and responsibilities.
• Define and implement operating models for Data Owners, Stewards, and Custodians.
• Create governance policies, standards, procedures, and operational models.
• Maintain business glossaries, metadata repositories, data dictionaries, and data catalogs.
• Establish data quality criteria, KPIs, and issue management processes.
• Conduct maturity assessments and design improvement plans for data governance.
• Lead workshops with business and IT stakeholders supporting governance bodies and working groups.
• Design data governance dashboards, KPIs, and executive reporting tools.
• Document data flows, lineage, and integration points spanning multiple systems and interfaces.
• Identify governance weaknesses, duplication issues, and ownership gaps within data processes.
• Support initiatives involving critical data elements, data migration, and transformation efforts.
• Build and apply enterprise-wide GRC frameworks including risk and compliance assessments.
• Maintain comprehensive risk and compliance registries and control documentation.
• Support audits, certification processes, and regulatory inspections.
• Manage enterprise privacy programs, including Records of Processing Activities, Data Protection Impact Assessments, and consent management.
• Implement data discovery and classification technologies, identify sensitive and regulated data, and oversee related configurations integrating with governance processes.
• Contribute to AI governance activities including inventory creation, risk classification, impact assessments, and regulatory adherence.

Standards and Technologies

The role expects familiarity with ISO/IEC standards such as 27001 and 42001, ISMS, AIMS, regional privacy laws, risk frameworks, and internal audit processes. Experience with GRC and privacy platforms including OneTrust, Collibra, Microsoft Purview, and others is advantageous.

Candidate Profile and Skills

• Solid experience in data governance, privacy, GRC, and compliance domains.
• Strong governance framework knowledge, risk assessment, and stakeholder engagement skills.
• Excellent analytical, documentation, and communication abilities.
• Capability to work autonomously as well as collaboratively in client-facing environments.
• Leadership qualities for senior roles including team and project management, mentoring, and business development support.

Desired Qualifications and Certifications

• Bachelor’s or Master’s degree in fields such as IT, computer science, data management, information security, or business disciplines.
• Industry certifications like CDMP, ISO/IEC 27001 & 42001 lead roles, privacy certifications (CIPP/CIPM/CIPT), and GRC certifications (CRISC, CISA, CISSP).
• Relevant consulting and implementation experience may supplement formal certifications.

Additional Candidate Attributes

• Detail-oriented with superb organizational skills.
• Effective communicator and stakeholder manager.
• Passionate about governance, privacy, AI governance, and compliance disciplines.
• Adept at translating regulatory demands into actionable governance solutions.
• Committed to delivering quality consulting outcomes in client settings.