Data Protection Officer (GMG/SEG2)

Responsibilities include, but are not limited to:

• Leading the implementation of essential elements of the Data Protection Act, rights of data subjects, security of data processing and communication of data breaches;
• Evaluating the existing data management framework to identify areas of non- compliance and make recommendations to rectify any issues;
• Driving the development of an internal Data Protection Policy and Procedures and make updates as necessary in consultation with the Information Commissioner;
• Managing sensitive information and maintaining records of all data subjects, data assets and security incident management plan/activities carried out by the Commission;
• Ensuring that the Commission’s existing policies and practices accord with the standards and requirements of the Data Protection Act;
• Devising training plans, delivering privacy training, promoting a culture of compliance and raising employee awareness;
• Ensuring that any breach of the data protection standards or any provisions of the Data Protection Act are dealt with in accordance with sub-section 5 of the Data Protection Act.

Minimum Required Qualification and Experience

• Undergraduate Degree in Law, Compliance, Information Technology, IT Security or related discipline;
• Specialised training or certification in data protection, information or risk management;
• At least one Data Protection and/or Privacy Certification such as CIPP or CIPT; and
• A minimum three (3) years’ working experience in data protection compliance, risk management or related field.

Thank you for your interest; however, only short-listed applicants will be contacted.