Data Protection Officer (DPO)

Summary

The Data Protection Officer (DPO) is responsible for conducting the necessary Data Protection Impact Assessments[DPIA] to identify risks arising out of the processing of personal data and to minimise these risks as far and as early as possible. In addition, monitoring, informing and advising the data controller, the data processor, the employees who carry out processing of their obligations pursuant to the Data Protection Act as well as undertaking activities that proffer advice and provide clarity to data subjects. The salary is J$7.1 million per annum plus any current allowances attached to this position.

Responsibilities

• • Implements and maintains data protection strategies in line with relevant laws and regulations.
• • Develops and updates data protection policies and procedures based on changing requirements.
• • Conducts data privacy impact assessments for new projects and initiatives.
• • Monitor data processing activities to ensure compliance with data protection regulations.
• • Investigates and address any data breach incidents in a timely manner.
• • Conducts regular compliance audits to evaluate data protection practices.
• • Collaborates with IT teams to implement technical safeguards for data protection.
• • Reviews and approves data processing agreements with third-party vendors.
• • Manages data subject access requests and ensure timely responses.
• • Develops and maintains incident response plans for data security incidents

Required Skills

• • Knowledgeable in developing and implementing data retention policies.
• • High level of proficiency in interpreting and applying data protection laws and regulations.
• • Strong analytical skills in identifying and addressing data privacy risks.
• • Excellent problem-solving abilities in resolving data protection issues.
• • Strong ethical conduct and integrity in handling sensitive data.
• • Proficient in implementing data encryption technologies to secure sensitive data.
• • Skilled in conducting privacy impact assessments to evaluate data processing activities.
• • Experienced in managing data breach response procedures to mitigate risks.
• • Knowledgeable in creating and maintaining data protection policies and procedures.
• • Skilled in performing data protection audits to assess compliance with regulations

Qualifications

• • Master’s Degree in Information Technology OR Business Administration, OR Law with relevant managerial experience.
• • Seven (7) years’ experience in a related field.
• • Expert knowledge of data protection law and practices.
• • Professional certification in data protection such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM).

Additional Information and Instructions

Applications should be sent no later than Friday May 2, 2025 to recruitment@icta.gov.jm We thank all applicants for their interest in this career opportunity. Kindly note, however, that only shortlisted candidates will be contacted.

Share This Job