Data Protection Officer

About the role

The Data Protection Officer will lead the organisation’s information security and data privacy programme. Reporting directly to the Chief Executive Officer, the role ensures that the Information Security Management System (ISMS) is established, maintained and continuously improved to protect information assets in line with legal and regulatory requirements.

Key responsibilities

• Communicate the information security policy to all relevant personnel and customers.
• Coordinate implementation of approved security strategies, programmes and initiatives.
• Oversee the organisation’s data protection strategy, ensuring compliance with applicable regulations.
• Serve as the primary contact for data subjects, regulators and internal stakeholders on data protection matters.
• Develop, implement and maintain data protection policies and procedures.
• Conduct data protection impact assessments (DPIAs) and risk assessments, and devise mitigation plans.
• Manage data subject requests, including access, rectification and erasure.
• Monitor compliance through regular audits and incident monitoring.
• Perform periodic information security risk assessments and create risk treatment plans.
• Document security controls and maintain incident management procedures.
• Report on improvement activities and track achievement against targets.

Required profile

• Job grade: Experienced Analyst – Associate.
• Reports to the Chief Executive Officer.
• Minimum experience of 1 month in information security or data protection.

Required skills