Data Protection and Privacy Officer

United Nations - New York, NY

Full-time - Mid Level

New York, NY

Social Assistance

About the position

The Data Protection and Privacy Officer at the United Nations Office for Data Protection and Privacy is responsible for supporting the operationalization of the Secretariat's data protection and privacy programme. This role involves ensuring compliance with data protection policies, managing data processing activities, and collaborating with various departments to promote data privacy across the UN System. The officer will also be involved in risk assessment, capacity building, and the development of procedures related to data breaches and privacy by design.

Responsibilities

• Provide support to the Chief Data Protection and Privacy Officer to operationalize the Secretariat data protection and privacy programme.
• Review processing of relevant data and inform the Chief Data Protection and Privacy Officer and Head of Entity regarding data protection and privacy policy compliance.
• Support the development and maintenance of a centralized reporting mechanism for receiving and recording requests for information from individuals concerning their personal data.
• Liaise with data focal points to strengthen collaboration and promote coherence in data protection across the UN System.
• Ensure compliance with relevant regulations, rules, policies, and practices concerning data processing, including maintaining data inventories and managing data breaches.
• Assess and monitor data protection and privacy risks in partnership with relevant offices and departments.
• Assist in monitoring activities and meeting reporting obligations related to data protection and privacy.
• Identify issues of general concern and provide recommendations to strengthen data protection regulations and policies.
• Support entities on data mapping exercises and data impact assessments, identifying safeguards to mitigate risks to data subjects.
• Support the development of procedures for managing data breaches and work with OICT on data breach management.
• Support OICT in developing data protection and privacy-by-design approaches and in procuring Privacy Enhancing Technologies (PETs).
• Build capacity of staff on data protection and privacy, including developing training for staff members.
• Manage and coordinate the activities of the team, including hiring, training, and assigning tasks.

Requirements

• An advanced university degree (Master's degree or equivalent) in law, business, public administration, computer science, information management, social sciences, or a related field.
• A minimum of five years of progressively responsible experience in data protection and privacy or similar areas.
• Experience working on recognized data protection and privacy principles, best practices, and methodologies is required.
• Experience working on governance, risk, and compliance tools to support data privacy programmes is desirable.
• Fluency in English is required; knowledge of a second official UN language is desirable.

Nice-to-haves

• An internationally recognized active certification in information privacy management and technology is desirable.

Benefits

• Competitive salary
• Health insurance
• Pension plan
• Paid holidays
• Professional development opportunities