Data Protection Officer

Major Responsibilities

• Ensure that the Auditor General’s Department processes personal data in compliance with the data protection standards and in compliance with the Data Protection Act and good practice. 
• Consult with the Office of the Information Commissioner to resolve any doubt about how the provisions of the Data Protection Act and any Regulations made thereunder are to be applied. 
• Ensure that any contravention of the data protection standards or any provisions of the Data Protection Act by the Auditor General’s Department is dealt with in accordance with the provisions of the Data Protection Act. 
• Notify the Auditor General’s Department of any contravention of the data protection standards or any provisions of the Data Protection Act. 
• Report any contravention of the data protection standards or any provisions of the Data Protection Act to the Office of the Information Commissioner. 
• Assist data subjects in the exercise of their rights under the Data Protection Act, in relation to the Auditor General’s Department. 
• Assist the Auditor General’s Department with the development of internal policies and procedures related to the processing of personal data. 
• Make recommendations for the appropriate organizational and technical measures to ensure the security of personal data. 
• Act as the primary contact point for the Office of the Information Commissioner on issues relating to the processing of data, and to consult, where appropriate, with regard to any other matter. 
• Monitor changes to local privacy laws and make recommendations where necessary.

Minimum Required Qualifications and Experience

• Undergraduate Degree in Law, Compliance, IT Security, Audit or similar background.
• At least one Data Protection and/or Privacy certification such as, CIPP, CIPT, ISEB, etc., (preferred). 
• At least 3 years’ experience in law, audit and/or risk management, compliance, or equivalent experience. 
• Sound knowledge of the Data Protection Act and other applicable data protection policies. 
• Other Desirable Qualifications & Experience that would be an asset 
• Master’s Degree in Data Protection, Business Administration, or similar background from a recognized tertiary institution; and 
• Sound knowledge of the anti-corruption laws. 

Desired Skills & Competencies

• Demonstrate a high level of confidentiality in execution of duties with the ability to act in an independent manner, free of any real or perceived conflicts. 
• Sufficient knowledge of information technology and data management systems
• Has due regard to the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing. 
• Detail-oriented approach needed to recommend and implement strategic improvements on a range of data privacy and data protection issues. 
• Shares the Commission’s values, mission and vision. 
• Consistently displays integrity, model’s behavior, develops people and builds teams.
• Excellent oral and written communication skills. 
• Manages continuity, change and transition and knows how to influence and enable others. 

Specific Knowledge

• Knowledge of the Data Protection Act, the Constitution of Jamaica, the Financial Administration and Audit Act and all other applicable Acts/ Legislation and policies that govern data protection and the operations of the Auditor General’s Department in the discharge of its mandate. 

Working Conditions

• Typical office environment.

Please note that only shortlisted applicants will be contacted.