Summary
Date Posted: Tuesday, February 25 2025, Base Salary: Not Disclosed

JOB DETAILS:
Job Purpose
Reporting to the Audit & Risk Manager, the Senior Data Protection Officer (SDPO) will be responsible for ensuring that the Authority meets its data protection obligations across all its operations. The SDPO will monitor and report on compliance and data practices to ensure that the Authority adheres to applicable data protection regulations. The SDPO will standardise policies and procedures across the Authority, including acquisitions, to ensure consistent data protection practices. Additionally, the SDPO will be responsible for advising on privacy risks, staff training, data protection impact assessments, and conducting internal audits across the Authority.

Key Responsibilities
• The primary responsibilities of the role will be:
• Compliance Oversight:
• Develop and implement data privacy policies and procedures aligned with data protection regulations.
• Monitor data processing activities across the Authority to identify potential risks and non-compliance issues.
• Conduct regular data protection audits and assessments to verify compliance.
• Investigate data breaches and incidents, coordinating response and remediation efforts.
• Risk Management:
• Perform Data Protection Impact Assessments (DPIAs) on new projects or data processing activities to identify and mitigate risks.
• Evaluate data protection controls and recommend improvements to data security practices.
• Analyse data privacy risks and develop mitigation strategies.
• Employee Training and Awareness:
• Design and deliver comprehensive data privacy training programs for all levels of employees.
• Educate staff on data handling procedures, data subject rights, and data protection regulations.
• Data Subject Requests:
• Manage data subject access requests, rectification requests, and deletion requests in accordance with data protection laws.
• Investigate and respond to data subject complaints.
• Liaison with Regulatory Bodies:
• Serve as the primary contact point for data protection authorities, providing information and responding to inquiries regarding data processing activities.
• Keep abreast of evolving data protection regulations and advise management on necessary updates.

Knowledge, Skills, Qualifications and Experience
• Bachelor’s degree in Business Administration, Law, Accountancy or related Degree.
• Grade 12 School Certificate or its equivalent with five (5) ‘O’ Levels (Credit or better).
• At least 4 to 5 years’ working experience in Data Protection or regulatory environment.
• Qualification in Data Protection will be an added advantage.

Competencies required for this Role
• Deep understanding of data protection laws: Expertise in relevant regulations like GDPR, Data Protection Act No.3 of 2021 etc.
• Legal knowledge: Familiarity with data privacy legal frameworks and case law.
• Technical proficiency: Basic understanding of data processing systems, IT infrastructure, and security controls.
• Communication skills: Ability to communicate complex data protection concepts clearly to both technical and non-technical audiences.
• Analytical skills: Capability to assess data processing activities, identify risks, and develop effective mitigation strategies.
• Leadership and stakeholder management: Ability to influence and collaborate with cross-functional teams across the organization.

Work Hours: 8

Experience in Months: 48

Level of Education: Bachelor Degree

Job application procedure
• To apply for this job please visit careers.nhima.co.zm.

All Jobs

QUICK ALERT SUBSCRIPTION