Data Protection Officer

We are seeking a dedicated Data Protection Officer (DPO) to ensure the organization’s compliance with data protection laws and regulations. The successful candidate will play a critical role in monitoring privacy law changes, updating policies, and integrating data privacy strategies within the broader information security framework. This position requires a proactive approach to managing personal data, conducting privacy assessments, and fostering a culture of privacy awareness across the organization.

Key Responsibilities

- Guarantee organizational adherence to relevant data protection laws and regulations.
- Monitor changes in privacy laws and promptly update policies and procedures to reflect the evolving legal landscape.
- Prepare and regularly review Data Privacy policies and procedures to ensure ongoing compliance with legal, regulatory, and organizational requirements.
- Assist in developing and implementing the Data Privacy strategy, ensuring alignment with the overall Information Security strategy.
- Conduct privacy impact assessments for new projects, processes, or technologies involving personal data.
- Identify and document the types of personal data processed, define processing purposes, classify data based on sensitivity, and implement appropriate protection measures.
- Manage and respond to data subject access requests and privacy-related inquiries.
- Provide training to employees on data protection best practices and promote privacy awareness throughout the organization.
- Collaborate with various departments to maintain a comprehensive approach to data protection and foster a culture of compliance.
- Support reporting authorities by implementing procedural control measures identified through audits, risk assessments, and compliance reviews.
- Serve as the primary point of contact for data protection matters, ensuring policies align with security and compliance standards.
- Oversee the development, implementation, and enforcement of information and data classification policies, ensuring they are reflected in SOPs and baseline documents.
- Perform internal privacy audits and assessments to identify gaps and recommend corrective actions.
- Work closely with Procurement and Third-Party Risk Management teams to assess and monitor third-party vendors handling personal data, ensuring compliance with privacy and data protection requirements.
- Undertake any other related duties assigned by the Head of Information Security.

Required Qualifications

- Strong knowledge and understanding of common data protection management frameworks and best practices.
- Proven ability to assess privacy impact, classify data, and establish protective measures based on sensitivity.
- Comprehensive understanding of Data Privacy strategy and its integration with broader Information Security goals.
- Excellent analytical, communication, collaboration, problem-solving, documentation, and leadership skills, with the ability to convey complex data protection concepts to diverse audiences.
- Bachelor’s degree in technology, engineering, information security, or a related field.
- Minimum of 6 to 7 years of hands-on experience in data and information security within a large enterprise environment.

Preferred Qualifications and Benefits

- Competitive salary package.
- Fuel card provided.
- Comprehensive health benefits.
- Opportunities for professional development.
- Inclusive work culture and additional employee benefits.

This role offers the opportunity to work at the forefront of data protection, ensuring the organization remains compliant and secure in an ever-changing regulatory environment. If you have the expertise and leadership skills to drive privacy initiatives and safeguard sensitive information, we encourage you to apply.