Data Protection and Privacy Manager, P-4, Fixed Term Position, Florence, Italy, Office of Strategy & Evidence (OSE) - Innocenti, #00107002

Organizational Context

UNICEF works in over 190 countries and territories to save children’s lives, defend their rights, and help them fulfill their potential. We are committed, passionate, and proud of what we do. Promoting the rights of every child is not just a job – it is a calling. UNICEF offers diverse opportunities for professional and personal development.

Job Purpose

This position serves as the Organization’s lead technical authority on personal data protection and privacy. The primary aim is to provide technical leadership in establishing and rolling out the corporate regulatory framework on personal data protection and privacy within UNICEF. This includes comprehensive monitoring and proactive addressing of risks associated with personal data processing. The role is crucial for ensuring UNICEF's compliance with data protection laws and best practices globally, fostering a culture of privacy, and managing potential data-related incidents effectively. The incumbent will guide the organization in navigating the complex landscape of data privacy, safeguarding sensitive information, and maintaining public trust.

Responsibilities

Provide technical leadership for personal data protection and privacy initiatives across the organization. Develop and implement a global strategy to foster a strong culture of privacy within UNICEF. Oversee global privacy risk management, identifying and mitigating potential data protection risks. Offer risk-informed technical support to UNICEF programmes and operations, ensuring data privacy considerations are integrated. Establish and maintain robust privacy governance, accountability mechanisms, and incident response protocols. Lead and manage a team, fostering collaboration and professional development. Ensure compliance with relevant data protection regulations and UNICEF policies. Advise on data processing activities, conduct privacy impact assessments, and develop training materials. Collaborate with various departments to embed privacy-by-design principles. Monitor and report on the effectiveness of privacy controls and recommend improvements.

Work Experience

A minimum of eight years of progressively responsible professional experience in law, information security, risk management, auditing, and/or compliance or a related field is required. At least five years of professional experience specifically in data protection or privacy is also required. Experience working for a large international corporation or international organization is essential.

Skills

Data Protection, Privacy Management, Risk Management, Legal Compliance, Information Security, Auditing, Technical Leadership, Global Strategy Development, Privacy Governance, Incident Response, Cross-cultural Communication, Problem-Solving

Explore related opportunities