Data Protection Specialist
Organizational Context
The Data Protection Unit (DPU) operates as an independent function within the Office of the Director-General. It is responsible for supporting and monitoring the implementation of the FAO Data Protection Policy across headquarters and decentralized offices. The DPU collaborates with various departments to ensure policy adherence and reports on compliance to the Data Protection Oversight Committee. This role can be performed remotely, as the specialist is not required to work on FAO premises.
Job Purpose
The primary purpose of this role is to develop and implement comprehensive data protection procedures, guidelines, and controls throughout the entire data lifecycle, from collection and processing to storage, transfer, and disposal. The specialist will provide essential technical advice and support to FAO offices, ensuring compliance with data protection regulations and effectively managing associated risks. This involves establishing robust frameworks to safeguard data and promote responsible data handling practices across the organization.
Responsibilities
The Data Protection Specialist will draft and update operational guidance and procedures for data protection. They will support the implementation of the data protection policy by advising divisions on organizational processes, standards, and technical controls. The role involves responding to data subject requests and internal queries regarding data protection matters. Additionally, the specialist will develop and review training materials to enhance data protection awareness. They will prepare reports for oversight committees and senior management on the status of data protection within FAO. Collaboration with UN System counterparts on data protection approaches is also a key responsibility, along with performing other assigned duties.
Work Experience
A minimum of five years of relevant professional experience in data protection, privacy, information security, or data ethics is required. Experience working in international organizations and understanding their legal frameworks is beneficial. Familiarity with compliance with data protection regulations like ISO 27701 or GDPR is also important.
Skills
Essential skills include strong communication, teamwork, and relationship-building abilities. The candidate must be results-focused and committed to knowledge sharing and continuous improvement. Proficiency in explaining complex technical issues simply and formulating guidance documents is crucial. Experience with international organizations, data protection frameworks (e.g., GDPR, ISO 27701), managing data subject requests, and handling data breaches is highly valued. Desired qualifications include data protection certifications such as CIPP, CIPM, CIPT, or CISSP.