Specialist II, Data Privacy & Governance

Description

The Specialist II, Data Privacy & Governance, is responsible for implementing, monitoring, and maintaining the organization’s data privacy and governance frameworks. This role ensures that all personal and sensitive data, Business data is collected, processed, classified, stored, and shared in compliance with applicable privacy laws, regulatory requirements, and internal policies

• Support security awareness and policy training programs for IT and business units.
• Support the creation governance policies, procedures, and guidelines, SOP.
• Implement and monitor data governance principles such as data classification, metadata management, data quality, and data lineage.
• Participate in internal and external assessments to ensure continual improvement of governance and compliance initiatives.
• Perform regular control and Risk management, gap analysis on IT and cybersecurity controls.
• Support the incident response process for data breaches or privacy violations — including investigation, root cause analysis, and mitigation.
• Supervise & Assign tasks and issues related to Findings / Observations from Control Functions as required, monitor to ensure progress and timely completion.
• Maintain up-to-date knowledge of relevant laws, regulations, and industry standards, and communicate changes to stakeholders.
• Monitor and report on privacy compliance metrics and issues.
• Prepare documentation and evidence for internal and external audits for NCA, ISO, PDPL, NDMO, SDAIA.
• ISO/IEC 27001 Lead Implementer Auditor
• Provide compliance guidance to application owners, system admins, and stakeholders.
• Identify and evaluate risks related to personal data processing, access, and sharing.
• Develop and monitor privacy and governance Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
• Develop and maintain documentation such as privacy notices, consent forms, data transfer agreements, and data retention schedules.
• conduct and support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new projects, systems, and vendors.
• Supervise and track all IT and Security related audits including scope of audits, timelines, and outcomes.
• Collaborate with various departments to implement and maintain governance frameworks.
• participate in defining data Governance Frameworks, including data classification, ownership, and stewardship models. Supervise the detection of deviations from established security policies, procedures, and role mappings, analyse findings and report discrepancies to management for timely remediation.
• Ensure incident handling aligns with policies and Procedures.
• Maintain and update the Record of Processing Activities (RoPA) to ensure accurate data mapping and inventory.
• Work with data stewards across departments to improve data accuracy, consistency, and completeness.
• Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) for new projects, systems, and vendors.
• Supervise and monitor IT environments and related functions to ensure compliance with organizational policies and regulatory requirements.
• Support the development, implementation, of the organization’s privacy policies, procedures, and controls.
• Ensure compliance with internal Polices national ,international Stander and regulation (e.g., GDPR, NDMO, PDPL, or other relevant laws).
• Review and validate the Access Review user for IT financial systems.
• Supervise & Prepare plans and ensure the completion of deliverables related to Findings as required.
• Collaborate with IT, Legal, and Business Units to ensure data integrity, consistency, and quality.

Requirements

• Certifications in Risk and Information Systems Control.
• 3– 5 years of relevant experience

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance