Data Governance, Privacy & GRC Consultant

About the role

The Data Governance, Privacy & GRC Consultant will support the design, implementation and continuous improvement of enterprise governance, privacy, compliance and risk management programmes for clients in Qatar and the UAE. You will work closely with business and technical stakeholders to establish robust governance frameworks, improve data quality and ensure regulatory compliance.

Key responsibilities

• Design and implement enterprise data governance frameworks, including policies, standards and operating models.
• Define and maintain data ownership, stewardship and custodianship roles and operating models.
• Build and maintain business glossaries, metadata repositories, data dictionaries and data catalogues.
• Define data quality rules, KPIs, ownership and issue‑management processes; conduct maturity assessments and road‑map development.
• Document end‑to‑end data flows, develop data lineage models and validate flows with architects, engineers and business users.
• Identify governance gaps, duplicate data, uncontrolled transfers and ownership issues.
• Design and implement enterprise GRC frameworks, maintain risk and compliance registers, and develop control documentation.
• Support ISO certifications, audits, regulatory assessments and track remediation plans.

Required profile

• Relevant experience in data governance, privacy and GRC initiatives.
• Ability to work with business and technical stakeholders to define governance structures and policies.
• Experience conducting data governance maturity assessments and developing improvement road‑maps.
• Strong understanding of regulatory compliance, risk management and control frameworks.

Required skills