Data Protection Officer (Level 5)

Summary

The Data Protection Officer (DPO) is responsible for monitoring the Agency’s data practices ensuring that all functions carried out by the Agency are in accordance with the provisions of the Data Protection Act (2020). Under the general direction of the Chief Executive Officer, the DPO will be accountable for monitoring internal compliance and providing guidance to the Agency on data protection obligations. Additionally, the DPO will serve as a primary point of contact for supervisory authorities, such as Office of the Information Commissioner, and individuals whose data is processed by the Agency. 💰Salary: $4,266,270 JMD per annum

Responsibilities

• Technical/Professional:

  • • Develop, implement, and maintain a comprehensive Data Privacy Governance Framework, strategies, policies, and procedures to manage personal data processing in compliance with the Data Protection Act and relevant regulations.
  • • Establish and maintain appropriate systems and internal control mechanisms aligned with prescribed data protection standards of the Data Protection Act.
  • • Regularly review and update the Agency's Data Protection policies, procedures, and plans to ensure alignment with changes in laws, regulations, and organisational practices.
  • • Monitor the Agency's adherence to the Data Protection Act, associated regulations, other relevant data protection provisions, and internal policies. This includes monitoring the assignment of responsibilities, staff awareness and training effectiveness.
  • • Provide advice on DPIAs when requested, monitor their execution, and advise on mitigating identified risks. Provide guidance on gaps identified through DPIAs to senior leadership.
  • • Ensure the timely collection, analysis, and reporting of data on key performance measures related to data protection compliance.
  • • Inform and advise senior management (CEO, Deputy CEO, Directors), data controllers, data processors, and employees of their obligations, rights, and responsibilities under the Data Protection Act and other relevant provisions. Provide interpretation and application guidance.
  • • Serve as the primary internal expert on data protection matters.
  • • Develop relevant training materials and deliver training and sensitization programs for employees on data protection compliance requirements, policies, and best practices.
  • • Prepare and conduct presentations on the role and importance of data protection for the Agency's orientation program.
  • • Raise awareness of data protection issues and foster a culture of data privacy throughout the Agency.
  • • Establish, maintain, and oversee mechanisms to effectively manage and respond to data subject requests (e.g., access, rectification, erasure), queries, and complaints, including providing information on data usage and protection measures as required.
  • • Maintain necessary records of data processing activities conducted by or on behalf of the Agency, as required by the Data Protection Act (e.g., Record of Processing Activities).
  • • Ensure proper management and maintenance of personal data records generally.
  • • Collaborate with the ICT unit/branch to ensure the Agency’s ICT systems and practices support data protection compliance.
  • • Collaborate with other key stakeholders (e.g., Enterprise Risk Management, Internal Audit, Legal Services, Human Resources) to monitor, implement, and analyse compliance programs.

• Management/Administrative:

  • • Assess the PICA’s business processes and work flows.
  • • Participate in the Agency’s strategic planning process – prepares and monitors the corporate and operational plan and budget ensuring the work of the Office is performed according to plan and agreed targets.
  • • Participate as a member of the management team in planning, problem resolution, and reviewing the performance and compliance of functional areas.
  • • Provide guidance to the CEO and Directors on matters relating to the Data Protection Act and attendant regulations.
  • • Represent the Agency at external meetings, seminars, workshops, conferences, and fora related to data protection.
  • • Prepare and submit routine, special, annual, quarterly, and monthly reports as required for management and potentially regulatory bodies.

• Human Resources:

  • • Establishes and maintains a system that fosters a culture of teamwork, employee empowerment and commitment to the Unit and Agency’s goals;
  • • Contribute to the development and implementation of a succession planning framework in collaboration with the Human Resource Division through the development of procedural manuals and other material as may be stipulated in keeping with the framework; and
  • • Prepares and conducts presentations on role of Unit for the Orientation programme.

• Other:

  • • Performs all other related duties and functions as may be required from time to time.

Required Skills

• Core:

  • • Excellent critical reasoning, quantitative and qualitative analysis skills
  • • Strong environmental scanning, analysis, and interpretive skills
  • • Strong negotiating and persuasive presentation skills
  • • Leadership
  • • Planning and Organizing
  • • Problem Solving & Analysis
  • • Communication
  • • Initiative & Judgment
  • • Integrity/Ethics
  • • Interpersonal Skills
  • • Priority Management
  • • Teamwork

• Technical:

  • • Expert knowledge of the data protection law and practices
  • • Proficiency in the use of the relevant computer applications
  • • Knowledge of change management principles and practices
  • • Expert knowledge of auditing techniques and practices
  • • Good knowledge of risk management techniques and strategies
  • • Sound knowledge and understanding of GOJ policies and programmes and the machinery of government
  • • Sound knowledge of applicable laws, policies, regulation and procedures  Knowledge of international standards and best practices in Data Protection policy development and implementation.
  • • Knowledge of data security systems
  • • knowledge of data privacy legislation (in particular General Data Protection Regulation).

Qualifications

• • Bachelor’s degree in Law, Computer Science, Audit or equivalent qualification from recognized tertiary institution.
• • Experience or specialized training in records and information management systems.
• • Experience in regulatory compliance
• • Minimum three (3) years related work experience.

Additional Information and Instructions

• • Work will be conducted in an office outfitted with standard office equipment and specialized software – in addition to undertaking duties within environments that may contain dust, noise and other hazards.
• • The environment is fast paced with on-going interactions with critical stakeholders and meeting tight deadlines which will result in high degrees of pressure, on occasions.
• • May be required to travel locally and internationally to attend conferences, seminars and meeting.

For all general job applications, kindly send résumés and application letters to 📧 recruitment@pica.gov.jm. If you believe you possess the above qualities and a strong desire to help the Agency fulfill its mandate, you are invited to submit your applications accompanied by detailed resume to: Director, Human Resources (Assigned) Passport Immigration & Citizenship Agency, 8 Waterloo Road, Kingston 10 ℹ️ Click Apply Now for the direct application link 🔗 Please indicate the name of the post that you are applying for in the subject line THURSDAY, JULY 31, 2025 @ 5:00 P.M. No hand delivered application will be accepted

Share This Job