Data Protection and Privacy Specialist (Country Support), (P-3), Fixed Term, Office of the Chief Data Officer, DAPM, Florence, Italy, #128969

UNICEF works in over 190 countries and territories to save children’s lives, defend their rights, and help them fulfill their potential, from early childhood through adolescence.

At UNICEF, we are committed, passionate, and proud of what we do. Promoting the rights of every child is not just a job – it is a calling.

UNICEF is a place where careers are built: we offer our staff diverse opportunities for personal and professional development that will help them develop a fulfilling career while delivering on a rewarding mission. We pride ourselves on a culture that helps staff thrive, coupled with an attractive compensation and benefits package.

Visit our website to learn more about what we do at UNICEF.

For every child, protection

The Division is responsible for driving, shaping and guiding UNICEF’s evidence-informed analysis, strategic planning, programme monitoring and organizational performance management. As such, DAPM enables the organization to deliver results in a more coherent manner, based on agile and contextualized programming processes, on data, evidence, and analysis, as well as the application of human-rights based and results-based management approaches.   

Within DAPM, the data portfolio is managed by two sections: the Data & Analytics Team, led by the Chief Statistician, and the Chief Data Office, led by the Chief Data Officer.

The Chief Statistician’s Office focuses on analyzing data on children to support UNICEF programming and advocacy. It also produces and maintains a number of data-related global public goods, such as a global monitoring database of child-related indicators and methodological standards and guidelines to help countries report on a number of child-related SDGs and other indicators. The Chief Statistician office collaborates with all UNICEF divisions and through regional offices to support and sustain the data and analytics capacity at the country offices by providing technical assistance, advocacy and partnerships on data-analytics for children.

The Office of the Chief Data Officer collaborates with all UNICEF divisions and through regional offices to country offices to help UNICEF create and sustain (1) Establish safeguards to minimize risks and potential harms to children, UNICEF staff, beneficiaries, and donors associated with data and digital technology, ensuring a responsible and safe digital and data transformation. (2) Implement robust governance of all forms of data at UNICEF, enabling the organization to leverage relevant data for better decision-making and outcomes for children.

The Data Governance and Strategy unit in the Chief Data Office is hiring a Data Protection Specialist (Country Support), a pivotal role to enable safe digital and data transformation of UNICEF and its partners.

In 2020, UNICEF issued a Policy for Personal Data Protection (the “Policy”) which applies to any personal data processing by or on behalf of UNICEF. This involves the data of the children who UNICEF serves, its staff, its individual donors, and others. The goal of the policy is to ensure that UNICEF uses personal data in line with individual’s rights and freedoms and without exposing them to inappropriate risks. To reach that purpose, the policy requires robust risk and compliance structures to ensure responsible use of data and technology in respect of children’s, donors’, and staff’s fundamental human rights, including the right to privacy. In addition, it needs a cultural transformation leading to the empowerment of individuals to better control their data, the understanding of privacy and its importance in the digital age, and overall: that data protection is about the people (behind the data)!

Purpose for the job:

To support offices and divisions with the implementation of the Policy, the Data Governance and Strategy unit is centrally developing a data protection programme, namely a normative framework, guidance, tools, central registries and training/awareness, to enable the organization to process personal data in compliance with the Policy and in respect of individuals’ rights to privacy. We are looking for data protection and privacy expert to design and support the roll-out of the UNICEF data protection programme with strong experience in data protection matters that country offices engaged in development and humanitarian work encounter.

The incumbent will work closely with a data protection specialist for legal and governance matters and a data protection specialist working at the intersection of data protection, technology, and cybersecurity. The data protection programme is overseen by the Data Protection and Privacy Manager (Data Protection Programme Lead).

Together, this group will, in addition to the design and roll-out of the data protection programme, provide technical support to offices and divisions with respect to all data protection matters raised by country office colleagues. Engagement with UNICEF country and regional offices is a core component of this role, including alignment with other relevant HQ functions providing support to the field.

The incumbent will be supported by the wider Data Governance and Strategy unit, working on data capacity building, a data strategy and data governance for UNICEF, and advocacy for data governance fit for children in our work with partners and beyond including in the cross-sectoral integration of country administrative data and information management systems.

How can you make a difference? 

The data protection specialist will have the following key functions, tasks and accountabilities:

1. Support the global mapping of personal data processing activities in the so-called Record of Processing Activities (ROPA) with the goal to give COs and senior management an overview over data processing activities, incl. high-risk, improving Heads of Offices’ compliance, risk-management, and decision-making, and allowing CDO to target their support. This will involve
   1. the integration of the ROPA with existing business processes,
   2. the review and improvement, if necessary, of the training and guidance produced for the field to implement the ROPA and how to use it,
   3. to set-up ad hoc implementation support to the field, if necessary, and
   4. the analysis of the outcomes from the ROPA.
2. Develops capacity building initiatives, including training, awareness-raising and community building with the goal to ensure a cultural transformation in UNICEF on the handling of personal data and individuals’ privacy rights. This will involve, in close collaboration with DAPM and the other CDO team members,
   1. the set-up of specialized training for the data protection network
   2. the development of mandatory training for all staff
   3. the development of an awareness and communications strategy to ensure a cultural transformation with data privacy at its heart

3. Support the development of procedures, guidance and tools by the CDO from a field perspective and support the roll-out to the field. This will involve, inter alia,
   1. the review of procedures and guidance on data protection impact assessments, on third party risk assessments, and on personal data retention, and others
   2. the review and roll-out of the data protection handbook,
   3. guidance notes on frequent support requests, as privacy by design and default, secure sharing/anonymization/destruction of personal data, AI and privacy, and other as identified through interactions with the field and with the data protection network (see under 6).

4. Integrate data protection into UNICEF’s regulatory framework and relevant guidance relating to children and other beneficiaries, with the goal to ensure a smooth integration of data protection into existing processes, such as
   1. the programme implementation procedure and manual, and
   2. the emergency procedure and manual,
   3. sector-specific policies, procedures and guidelines,
   4. technology architecture review processes, such as the PPM.
   5. and support the roll-out of those documents to the field, including with relevant guidance material and training.

5. Support data protection risk-management in the field, with the goal to ensure that data processing risks are clearly outlined, categorized, understood, and managed namely
   1. review/improve risk management training and guidance materials,
   2. support and monitor the roll-out of risk management platforms,
   3. set-up additional support structures, if needed, and
   4. ensure that country offices learn from/can make use of DPIAs/vendor risk assessments of (digitally enabled) programmes conducted in other offices/regions.
6. Coordinate the set-up and collaboration with the data protection network with the goal to create a reliable, effective and enthusiastic support system for the field, namely
   1. review current TOR and agenda, improve/specify current approach, organize kick off-meeting
   2. coordinate recurrent meetings with a goal to structure recurring questions and provide efficient and effective support.

7. Together with the data protection network and other stakeholders as applicable, provide technical support to offices and divisions, including through the Evidence Help Desk, such as relating to
   1. Responsible data sharing
   2. Privacy compliance of projects, incl. digitally enabled projects,
   3. Data protection impact assessments
   4. Requests from data subjects, etc.

To qualify as an advocate for every child you will have…

• Education: 

  •           Master’s degree in international relations and/or development, international law, data protection and privacy law, or other related field

  •           Data protection certifications are an asset

  *A first level university degree combined with an additional two years of professional experience may be accepted in lieu of an advanced university degree.

• Work Experience:

  •         At least 5 years of working experience in personal data protection and privacy with a strong expertise in data protection field matters, including in digitally enabled programmes, risk management, training and global data mapping / record of processing activities

  •         Prior experience working with a multilateral or UN organization, and in particular in/with country offices and beneficiaries

  •         Good understanding of national and international data protection laws, such as GDPR

  •         Good understanding of the privacy challenges of technologies, including novel technologies such as artificial intelligence, big data and data protection and privacy and trends in reconciling them

  •           Good understanding of the data protection challenges of humanitarian and development operations

  •         Proficiency in developing practical and easily understandable and implementable advice on complex technical matters to field audiences.

  •           Competent in advanced Excel, Word, data analytics and data visualization, including digital data flow.

  •           Demonstrated strong writing and presentation skills, particularly for country office audiences.

  •         Strong analytical skills, attention to detail.

  •         Advanced communication skills, including ability to translate business needs into technical requirements and translate complex concepts in a simple manner for a non-technical audience is highly desirable.

  •           Project management skills including task prioritization, workflow coordination, and results-driven strategies is desirable.

  •         Excellent organizational skills and ability to prioritize and manage multiple tasks.

  •         Experience developing learning initiatives and guidance, managing and engaging communities/networks

• Skills

  •           A strong team player with the ability to engage and motivate stakeholders.

  •           A good listener and excellent communicator, written and verbal communication, with a keen interest in bringing along others with diverse backgrounds and interests.

  •           Ability to connect with and mobilize support across levels, from leadership to specialists.

  •           Curiosity, resilience, and optimism

• Language Requirements: Fluency in English is required. Knowledge of another UN language is an asset.

For every Child, you demonstrate…

UNICEF’s Core Values of Care, Respect, Integrity, Trust and Accountability and Sustainability (CRITAS) underpin everything we do and how we do it. Get acquainted with Our Values Charter: UNICEF Values

The UNICEF competencies required for this post are…

(1) Builds and maintains partnerships

(2) Demonstrates self-awareness and ethical awareness

(3) Drive to achieve results for impact

(4) Innovates and embraces change

(5) Manages ambiguity and complexity

(6) Thinks and acts strategically

(7) Works collaboratively with others 

Familiarize yourself with our competency framework and its different levels.

UNICEF is here to serve the world’s most disadvantaged children and our global workforce must reflect the diversity of those children. The UNICEF family is committed to include everyone, irrespective of their race/ethnicity, age, disability, gender identity, sexual orientation, religion, nationality, socio-economic background, or any other personal characteristic.

We offer a wide range of measures to include a more diverse workforce, such as paid parental leave, time off for breastfeeding purposes, and reasonable accommodation for persons with disabilities. UNICEF strongly encourages the use of flexible working arrangements.

UNICEF does not hire candidates who are married to children (persons under 18). UNICEF has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and UNICEF, including sexual exploitation and abuse, sexual harassment, abuse of authority, and discrimination. UNICEF is committed to promoting the protection and safeguarding of all children. All selected candidates will undergo rigorous reference and background checks and will be expected to adhere to these standards and principles. Background checks will include the verification of academic credential(s) and employment history. Selected candidates may be required to provide additional information to conduct a background check.

UNICEF appointments are subject to medical clearance.  Issuance of a visa by the host country of the duty station is required for IP positions and will be facilitated by UNICEF. Appointments may also be subject to inoculation (vaccination) requirements, including against SARS-CoV-2 (Covid). Should you be selected for a position with UNICEF, you either must be inoculated as required or receive a medical exemption from the relevant department of the UN. Otherwise, the selection will be canceled.

Remarks:

As per Article 101, paragraph 3, of the Charter of the United Nations, the paramount consideration in the employment of the staff is the necessity of securing the highest standards of efficiency, competence, and integrity.

Government employees who are considered for employment with UNICEF are normally required to resign from their government positions before taking up an assignment with UNICEF. UNICEF reserves the right to withdraw an offer of appointment, without compensation, if a visa or medical clearance is not obtained, or necessary inoculation requirements are not met, within a reasonable period for any reason. 

UNICEF does not charge a processing fee at any stage of its recruitment, selection, and hiring processes (i.e., application stage, interview stage, validation stage, or appointment and training). UNICEF will not ask for applicants’ bank account information.

In this role, you will collaborate with colleagues across multiple locations. For effective collaboration, we encourage flexible working hours that accommodate different time zones while prioritizing staff wellbeing.

Mobility is a condition of international professional employment with UNICEF and an underlying premise of the international civil service.

All UNICEF positions are advertised, and only shortlisted candidates will be contacted and advance to the next stage of the selection process. An internal candidate performing at the level of the post in the relevant functional area, or an internal/external candidate in the corresponding Talent Group, may be selected, if suitable for the post, without assessment of other candidates.

Additional information about working for UNICEF can be found here.