Opportunity Information
PDA- J165
1
Federal Government Authority
Mid Career
On Site
Islamabad
The Role
The Data Protection Officer will establish, maintain and monitor PDA's data protection, privacy and data governance programme in Islamabad, ensuring responsible handling of personal, sensitive and confidential information.
•Develop and maintain data protection, privacy and data governance policies and procedures •Maintain data inventories, data flows, Records of Processing Activities (RoPA) and data registers •Assess risks to personal, sensitive, financial and confidential data and conduct/ oversee Data Protection Impact Assessments (DPIAs) •Ensure Privacy by Design and Privacy by Default across applications, projects and business processes •Establish and monitor processes for handling data-subject rights and privacy requests •Assess vendor and third-party data-processing risks and advise on data sharing and cross-border transfers •Support investigation of data breaches and privacy incidents and conduct periodic compliance assessments •Coordinate with Information Security, IT, Legal, Compliance, Risk, Internal Audit, HR and Procurement and deliver privacy awareness programmes •Prepare periodic privacy, compliance and data-protection risk reports for senior management
Applicants General Eligibility & Requirements
4+ years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Cyber Security, Information Security, Information Technology, Law, Risk Management
- Masters: Information Security
Minimum 4 years of relevant experience in data protection, privacy, information security, compliance, risk management or a related field; working knowledge of GDPR principles, local privacy legislation, ISO 27001/ ISO 27701 and data governance frameworks Preferred: Experience in RoPA, DPIAs, privacy risk assessment, data classification, retention, third-party processing and data breach management; basic understanding of cybersecurity, cloud, databases, encryption, IAM and DLP
Data Protection, GDPR, ISO 27001, Privacy Risk Assessment
•ISO 27701 Lead Implementer/ Auditor, CISM, CISSP or equivalent preferred