How to Write a CV When Your Employer Is Under a Confidentiality NDA

· 7 min read

You have delivered high-value work in defence, banking, a sovereign fund or oil and gas, but your contract prevents you from naming clients, systems or figures. This guide shows how to write a Gulf CV when your employer is under a confidentiality NDA, so you can prove your impact without breaching your obligations. The approach is simple: replace names with descriptors, replace exact figures with ranges, and shift the focus to what you controlled and influenced.

Understand what an NDA actually restricts

A confidentiality agreement typically protects specific information: client identities, project names, technical specifications, financial data and sometimes the fact that a project exists. It rarely prevents you from describing your profession, your seniority, the general sector you worked in or the skills you applied. The line is usually crossed when you reveal information that could identify a client or disclose commercially sensitive details.

Before you rewrite your CV, read your contract and any separate confidentiality undertaking. If the wording is unclear, ask your employer's HR or legal team what you may disclose, or seek independent legal advice. Rules differ between countries and employers, so do not rely on general assumptions. When in doubt, describe less and focus on your role rather than the project.

  • Check whether your NDA covers client names, project names, technical details or all three.
  • Ask HR or legal for written guidance on what you can say in a CV.
  • Remember that confidentiality obligations often continue after you leave.
  • Avoid disclosing anything that could identify a client indirectly, such as a unique combination of dates and locations.

Use sector descriptors instead of client names

The most practical technique is to replace the client name with a sector or category descriptor. This keeps the context meaningful for recruiters while protecting the identity of the client. For example, instead of naming a specific bank, write 'a top-tier regional bank' or 'a GCC systemically important bank'. Instead of naming a defence contractor, write 'a defence electronics prime'.

Descriptors should be specific enough to signal the level of complexity but general enough that several organisations could fit. Avoid combining a descriptor with a city, a year and a project type if that combination would make the client obvious. A recruiter in the same sector may still guess, but you have not confirmed it.

  • Banking: 'a GCC retail bank', 'a regional investment bank', 'a sovereign wealth fund'.
  • Defence: 'a defence prime contractor', 'a government defence programme', 'a secure communications provider'.
  • Oil and gas: 'an international oil company', 'a national energy company', 'a downstream refining operator'.
  • Public sector: 'a Gulf government ministry', 'a regulatory authority', 'a public infrastructure programme'.

Anonymise scale metrics with ranges and context

Numbers prove impact, but exact figures can breach confidentiality. Replace precise values with ranges or orders of magnitude, and add context so the reader understands the scale. For example, 'managed a budget of USD 40–60 million' or 'led a team of 20–30 engineers'. If even a range feels sensitive, describe the scale in relative terms: 'one of the largest programmes in the division' or 'a multi-site rollout across the region'.

Be consistent and honest. Do not inflate ranges to impress; recruiters may ask about them in interviews. Prepare a verbal explanation that stays within your confidentiality limits, such as 'I can share the approximate scale and my role, but not the client or exact figures'.

  • Use ranges: 'a team of 15–20', 'a budget in the tens of millions'.
  • Use orders of magnitude: 'a multi-billion-dollar portfolio' only if that is accurate.
  • Describe relative scale: 'the largest system in the group', 'a first-of-its-kind regional deployment'.
  • Add context: duration, number of sites, number of stakeholders.

Shift to 'what I controlled' framing

When you cannot name the system or client, focus on what you controlled: decisions, resources, risks, teams and outcomes. This framing is powerful because it shows seniority and judgement without revealing sensitive details. Instead of 'implemented System X for Client Y', write 'owned the delivery plan, budget and risk register for a secure payments platform, coordinating 4 vendors and 3 internal teams'.

Use action verbs that describe your authority: owned, governed, approved, escalated, negotiated, mitigated. Then attach the anonymised context. This approach works well in defence, banking and sovereign fund roles where the sensitivity is high but the recruiter mainly wants to understand your level of responsibility.

  • Owned the budget, schedule and risk log for a confidential infrastructure programme.
  • Approved technical designs and managed vendor performance across three suppliers.
  • Led a cross-functional team of 12–15 specialists across two countries.
  • Presented monthly status and risk reports to an executive steering committee.
  • Reduced delivery risk by introducing a new change-control process.

Rewrite examples for defence, banking, sovereign funds and oil and gas

Different sectors have different sensitivities. In defence, avoid programme names, platform types and client units. In banking, avoid client names, exact portfolio values and system names. In sovereign funds, avoid fund names, deal sizes and counterparties. In oil and gas, avoid field names, exact production figures and joint-venture partners.

Here are before-and-after patterns you can adapt. The 'before' line would breach a typical NDA; the 'after' line preserves the impact while staying within limits.

  • Defence before: 'Led the secure communications upgrade for Client X.' After: 'Led a secure communications upgrade for a government defence programme, managing a team of 10–15 engineers and a multi-million-dollar budget.'
  • Banking before: 'Managed a USD 250 million portfolio for Bank Y.' After: 'Managed a corporate credit portfolio in the hundreds of millions for a top-tier GCC bank, covering 20–30 relationships.'
  • Sovereign fund before: 'Executed a USD 1.2 billion infrastructure deal for Fund Z.' After: 'Supported the execution of a large infrastructure transaction for a Gulf sovereign investor, coordinating legal, technical and financial advisers.'
  • Oil and gas before: 'Optimised production at Field A by 15%.' After: 'Improved production efficiency at a major onshore field by a double-digit percentage, leading a multi-disciplinary team.'

Handle job titles, dates and references carefully

Your job title is usually safe to disclose, but if your title itself reveals a client or a classified programme, use a generic equivalent and explain it in an interview. Dates are generally fine, but avoid combining dates with project names or locations that could identify a client. For references, ask former colleagues or managers whether they are willing to act as a reference and what they are permitted to say.

If you are still employed, be careful about using current colleagues as references. Many employers have policies about providing references, and some will only confirm dates and job titles. Check your HR policy before listing anyone.

  • Use a generic job title if your official title reveals a client or programme.
  • Keep dates but avoid project-specific date ranges that could identify a client.
  • Ask referees in advance and confirm what they can disclose.
  • Do not list a current manager without checking your employer's reference policy.

Prepare a confidentiality-safe interview explanation

Recruiters will ask follow-up questions. Prepare a short, consistent explanation that shows you take confidentiality seriously. For example: 'I can describe my role, the scale and the outcomes, but I cannot name the client or share technical details. I am happy to discuss my approach and decision-making.' This answer demonstrates professionalism and often satisfies the interviewer.

If an interviewer pushes for details, politely repeat your boundary. A reputable employer will respect it. You can also offer to discuss similar non-confidential work or to provide a high-level overview of your responsibilities.

  • Rehearse a one-sentence boundary statement.
  • Offer to discuss your role, scale and outcomes instead of names.
  • Do not confirm or deny guesses about the client.
  • Keep the same explanation across interviews and written applications.

Final checks before you send your CV

Before submitting, review your CV for indirect identifiers: a unique combination of city, year, project type and client sector can still reveal a client. Ask a trusted contact in the same industry to read it and flag anything that feels too specific. Also check that your Arabic and English versions tell the same story, since many Gulf employers review both.

Finally, keep a private master document with the full details of your projects. You can use it to prepare for interviews and to update your CV later, but never send it to employers. If you would like help tailoring your CV for Gulf roles, TalentScan offers ATS CV scoring and rewriting in Arabic and English, along with job-fit reports and interview practice, so you can present your confidential experience confidently and compliantly.

  • Remove or generalise any detail that could identify a client indirectly.
  • Ask a trusted peer to review for accidental disclosure.
  • Ensure Arabic and English versions are consistent.
  • Keep a private master CV with full details for your own reference.

Try TalentScan free