DATA PROTECTION OFFICER(X1) - GABORONE

Main purpose of the position

• To plan, coordinate, optimise, and manage the processes involved in the data protection within the Corporation by developing and implementing data protection policies, strategies, and programs in accordance with the data protection standards to enhance the Corporation’s integrity. This role is also responsible for ensuring the protection of employees and customers’ private data as well as information stored and managed within the Corporation.

Job Responsibilities

• Enforces the organization’s compliance with DPA, and other relevant regulations.
• Monitors and audits internal data processing activities to ensure they are compliant with data protection laws.
• Develops and implements BPC’s data protection policies and procedures.
• Adheres to Department-specific Service Charter.
• Manages client relationships with guidance from senior colleagues.
• Conducts regular training sessions and awareness programs for employees on data protection and DPA compliance.
• Fosters a data protection culture within the organization, ensuring that employees understand their roles in protecting personal data.
• Continuously informs employees of relevant changes, improvements, or developments within the BPC and facilitates for implementation.
• Develops and maintains data breach response plans, ensuring the organization is prepared to respond to data breaches effectively.
• Leads the investigation and resolution of data breaches, including notifications to affected individuals and regulatory bodies as required.
• Enforces compliance with safety principles in the Department and minimises injury and the loss of productivity caused by safety incidents through reporting of Near Miss incidents.
• Undertakes any other related duties as directed by the supervisor from time to time to meet the exigencies of the Corporation.

Qualifications

• Bachelor’s Degree in Law, or Bachelor’s Degree in Information Management, or Bachelor’s Degree in Data Management or Bachelor’s Degree in Risk and Compliance, or equivalent.
• Membership of a relevant professional association will be an added advantage.

Experience

• A minimum of seven (7) years post qualification experience in regulatory compliance, of which five (5) years should be in a similar area or environment and three (3) years at middle management in a medium to large scale organisation with knowledge on data protection laws and practices.

Competencies