Data Protection Specialist

Job Posting Organization:
The Food and Agriculture Organization (FAO) is a specialized agency of the United Nations that leads international efforts to defeat hunger. Established in 1945, FAO has over 194 member countries and works in more than 130 countries worldwide. The organization aims to achieve security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">food security for all and ensure that people have regular access to enough high-quality food to lead active, healthy lives. The Data Protection Unit (DPU) is an independent function within FAO that supports and monitors the implementation of the FAO Data Protection Policy (DPP) across its various offices and operations.

Job Overview:
The Data Protection Specialist will play a crucial role in developing and implementing data protection procedures, guidelines, and controls throughout the data lifecycle, which includes data collection, processing, storage, transfer, and disposal. This position requires the specialist to provide technical advice to FAO offices regarding compliance with data protection regulations and risk management strategies. The specialist will work remotely and will report to the Head of the DPU, ensuring that data protection policies are effectively communicated and adhered to across the organization. The role is vital in fostering a culture of data protection within FAO and ensuring that all staff are aware of their responsibilities regarding data privacy and security.

Duties and Responsibilities:
The Data Protection Specialist will be responsible for a variety of tasks, including but not limited to: drafting new operational guidance and updating existing procedures for data protection; supporting the implementation of the data protection policy by advising divisions on establishing new organizational processes, standards, and technical controls; responding to requests from data subjects and other data providers in accordance with the Data Protection Policy; providing internal advice to FAO units and offices on data protection matters; developing and reviewing training materials to enhance understanding of data protection; preparing updates and reports for the Data Protection Oversight Committee, the FAO Advisory Oversight Committee, Senior Management, and FAO’s Governing Bodies regarding the status of data protection; representing FAO in meetings with counterparts in other UN agencies to ensure consistency in data protection policies; and performing any other duties as required.

Required Qualifications:
Candidates must possess an advanced university degree from an institution recognized by the International Association of Universities (IAU)/UNESCO in a relevant discipline such as law, data protection, information management, information systems management, business, information security, computer science, or information technology. For consultants with a bachelor's degree, two additional years of relevant professional experience are required. Additionally, candidates should have at least five years of relevant experience in data protection, privacy, information security, data ethics, or a related field. A working knowledge of English (C1) is mandatory, and a limited knowledge of one of the following languages: Spanish, French, Arabic, Chinese, or Russian is desirable for consultants.

Educational Background:
The educational background required for this position includes an advanced university degree in a relevant field recognized by the IAU/UNESCO. This could encompass disciplines such as law, data protection, information management, information systems management, business, information security, computer science, or information technology. For those with a bachelor's degree, it is essential to have two additional years of relevant professional experience to qualify for the role.

Experience:
The position requires a minimum of five years of relevant experience in areas such as data protection, privacy, information security, or data ethics. Candidates should have experience working in international organizations and an understanding of the legal frameworks that govern data protection. Experience with compliance to data protection frameworks such as ISO 27701, GDPR, or other national privacy regulations is also essential. Additionally, candidates should have experience managing data provider requests, concerns, and data breaches, which is critical for ensuring compliance and maintaining trust in data handling practices.

Languages:
A working knowledge of English at a C1 level is mandatory for this position. Additionally, candidates should have a limited knowledge of one of the following languages: Spanish, French, Arabic, Chinese, or Russian, which is considered desirable for consultants. Proficiency in these languages can enhance communication and collaboration within the diverse international environment of FAO.

Additional Notes:
This position is remote, allowing the Data Protection Specialist to work from any location. The role is full-time and may involve collaboration with various FAO offices and international counterparts. Candidates will be assessed against the minimum requirements and selection criteria, which include a desire for data protection certifications such as Certified Information Privacy Professional (CIPP), Certified Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), or Certified Information Systems Security Professional (CISSP). The position does not specify a contract duration, but candidates should be prepared for a commitment that aligns with FAO's operational needs.