[Hiring] Data Protection Specialist @Food and Agriculture Organization (FAO)

Role Description

The Data Protection Specialist resides within the Data Protection Unit (DPU) and will report to the Head of the DPU. The role involves developing data protection procedures, guidelines, and controls across the data lifecycle from data collection, processing, storage, transfer, and disposal. The specialist will provide technical advice to FAO offices on matters relating to data protection compliance and risk management.

• Draft new (and update existing) operational guidance and procedures for data protection.
• Support the implementation of the data protection policy by guiding divisions on setting new organisational processes, standards, and/or technical controls.
• Respond to requests from data subjects and other data providers submitted in accordance with the Data Protection Policy.
• Respond to internal requests for advice from FAO units and offices related to data protection matters.
• Develop and/or review training and awareness materials to enhance understanding of data protection across FAO.
• Draft updates and reports to the Data Protection Oversight Committee (DPOC), the FAO Advisory Oversight Committee (OAC), Senior Management, and FAO’s Governing Bodies on the status of data protection in FAO, as required.
• Represent FAO in meetings with, and collaborate with, counterparts in other UN System agencies to ensure consistency and coordination with UN System policy approaches with respect to data protection and intellectual property (only Consultants).
• Perform any other duties, as required.

Qualifications

• Advanced university degree from an institution recognized by the International Association of Universities (IAU)/UNESCO in relevant discipline such as law, data protection, information management, information systems management, business, information security, computer science, and information technology. Consultants with a bachelor's degree need two additional years of relevant professional experience.
• At least five (5) years of relevant experience in data protection, privacy, information security, data ethics, or related discipline.
• Working knowledge of English (C1).
• Limited knowledge of one of Spanish, French, Arabic, Chinese, or Russian (for Consultants) is desirable.

Requirements

• Strong skills in explaining complex technical matters in simple words and formulating guidance and process documents accordingly.
• Work experience in more than one location or area of work.
• Experience in international organisations and the legal framework within which they operate.
• Experience in compliance with data protection frameworks such as ISO 27701, GDPR, or other national or state privacy regulation.
• Experience with managing data providers' requests, concerns, and data breaches.

Company Description