Data Protection Officer-Cassava Smartech  301 views

Cassava Smartech is looking for a versatile and dynamic Data Protection Officer to join its Security and Governance team. The successful incumbent will be responsible in ensuring compliance with applicable privacy legislation, the Zimbabwe Cybersecurity and Data Protection Bill, General Data Protection

Regulations, the Data Protection Act 2018; and other statutory data protection requirements.

Duties And Responsibilities

Key Responsibilities

• Monitors data protection materials policies, manuals, procedures and ensures ongoing compliance with privacy laws and regulations.

• Establishes a privacy governance framework to manage data use in compliance with the Cybersecurity and Data Protection Bill.

• Manages stakeholder specific requirements from data protection standpoint.

• Works with key internal stakeholders in the review of projects and related data to ensure compliance with local data privacy laws, and where necessary, completes and advises on privacy impact assessments.

• Coordinates and performs internal data privacy audits to ensure compliance.

• Serves as the primary point of contact for the internal business regarding data privacy rules, best practices, and requirements, and manages internal data protection activities.

• Develops and delivers privacy training to various business functions.

• Coordinates and performs internal data privacy audits to ensure compliance.

• Collaborates with the Information Security team to provide guidance and raises employee awareness regarding data privacy and security issues and provide relevant training.

• Collaborates with the Information Security team to maintain records of all data assets and exports, and maintains a data privacy and security incident management plan to ensure timely remediation of incidents including impact assessments.

Qualifications And Experience

A degree in Computer Science / Information Systems / Law / Information Security and Assurance / Information Systems or relevant field.

• At least one Data Protection and / or Privacy certification such as Certified Information Privacy Professional (CIPP), Certified Data Privacy Solutions Engineer (CDPSE), Privacy Law Specialist, Certified Information Privacy Manager (CIPM).

• 3 years’ experience in the wireless, mobile communications and financial industry is a must.

• Experience within a compliance, legal, audit and/or risk function, with recent experience in privacy compliance.

• Strong knowledge of data privacy and data protection regulations, and a solid understanding of other major privacy frameworks and evolving legislation.