Data Protection and Privacy Specialist (Governance), (P-3), Fixed Term, Office of the Chief Data Officer, DAPM, Florence, Italy, #128968

UNICEF works in over 190 countries and territories to save children’s lives, defend their rights, and help them fulfill their potential, from early childhood through adolescence.

At UNICEF, we are committed, passionate, and proud of what we do. Promoting the rights of every child is not just a job – it is a calling.

UNICEF is a place where careers are built: we offer our staff diverse opportunities for personal and professional development that will help them develop a fulfilling career while delivering on a rewarding mission. We pride ourselves on a culture that helps staff thrive, coupled with an attractive compensation and benefits package.

Visit our website to learn more about what we do at UNICEF.

For every child, protection

The Division of Data, Analytics, Planning and Monitoring (DAPM) was established in 2019 to drive decision-making and organizational learning, improve the effectiveness and achievement of results of UNICEF and its partners to realize the rights and improve the life of every child. DAPM promotes the use of data and monitoring to achieve a transformative impact on the lives of children. 

The Division is responsible for driving, shaping and guiding UNICEF’s evidence-informed analysis, strategic planning, programme monitoring and organizational performance management. As such, DAPM enables the organization to deliver results in a more coherent manner, based on agile and contextualized programming processes, on data, evidence, and analysis, as well as the application of human-rights based and results-based management approaches.   

Within DAPM, the data portfolio is managed by two sections: the Data & Analytics Team, led by the Chief Statistician, and the Chief Data Office, led by the Chief Data Officer.

The Chief Statistician’s Office focuses on analyzing data on children to support UNICEF programming and advocacy. It also produces and maintains a number of data-related global public goods, such as a global monitoring database of child-related indicators and methodological standards and guidelines to help countries report on a number of child-related SDGs and other indicators. The Chief Statistician office collaborates with all UNICEF divisions and through regional offices to support and sustain the data and analytics capacity at the country offices by providing technical assistance, advocacy and partnerships on data-analytics for children.

The Office of the Chief Data Officer collaborates with all UNICEF divisions and through regional offices to country offices to help UNICEF create and sustain (1) Establish safeguards to minimize risks and potential harms to children, UNICEF staff, beneficiaries, and donors associated with data and digital technology, ensuring a responsible and safe digital and data transformation. (2) Implement robust governance of all forms of data at UNICEF, enabling the organization to leverage relevant data for better decision-making and outcomes for children.

The Data Governance and Strategy unit in the Chief Data Office is hiring a Data Protection Specialist (Governance), a pivotal role to enable a safe digital and data transformation of UNICEF and its partners.  

In 2020, UNICEF issued a Policy for Personal Data Protection (the “Policy”) which applies to any personal data processing by or on behalf of UNICEF. This involves the data of the children who UNICEF serves, its staff, its individual donors, and others. The goal of the policy is to ensure that UNICEF uses personal data in line with individual’s rights and freedoms and without exposing them to inappropriate risks. To reach that purpose, the policy requires robust risk and compliance structures to ensure responsible use of data and technology in respect of children’s, donors’, and staff’s fundamental human rights, including the right to privacy. In addition, it needs a cultural transformation leading to the empowerment of individuals to better control their data, the understanding of privacy and its importance in the digital age, and overall: that data protection is about the people (behind the data)!

Purpose for the job:

To support offices and divisions with the implementation of the Policy, the Data Governance and Strategy unit is centrally developing a data protection programme, namely a normative framework, guidance, tools, central registries and training/awareness, to enable the organization to process personal data in compliance with the Policy and in respect of individuals’ rights to privacy. The incumbent will design and support the roll-out of the UNICEF data protection programme with strong experience in the development of normative and governance frameworks (e.g., for monitoring and compliance purposes) including the development of regulatory instruments such as policies and procedures.

The incumbent will work closely with a data protection specialist providing support to UNICEF country offices on the implementation of the policy, a data protection specialist working at the intersection of data protection, technology, and cybersecurity. The data protection programme is overseen by the Data Protection and Privacy Manager (Data Protection Programme Lead).  

Together, this group will, in addition to the design and roll-out of the data protection programme,  provide technical support to offices and divisions with respect to all non-legal data protection matters. Engagement with UNICEF divisions including the Legal Office, the Information and Communication Technology Division, Programme Group, Emergency Operations, and other sections of DAPM will be a core component of this role.

The incumbent will be supported by the wider Data Governance and Strategy unit, working on data capacity building, a data strategy and data governance for UNICEF, and advocacy for data governance fit for children in our work with partners and beyond including in the cross-sectoral integration of country administrative data and information management systems.

How can you make a difference? 

The data protection specialist will have the following key functions, tasks and accountabilities:

1. Set-up and regularly review the normative framework for personal data protection, including
   1. Review and coordinate consultations / re-issuance of the UNICEF Policy on Personal Data Protection,
   2. Review and coordinate consultations / re-issuance of the UNICEF Procedure on Personal Data Breach, and related guidance,
   3. Finalize and coordinate consultations / issuance of a data protection impact procedure and guidance, and related guidance,
   4. Support the finalization of the Complaint and Feedback Procedure incorporating beneficiaries data subject rights and assess the organizational needs for further procedures, guidances on the rights of other data subjects such as staff, applicants, donors etc. and support the development of those instruments
   5. Draft and coordinate consultations / issuance of an appropriate regulatory instrument on personal data retention,
   6. Draft and coordinate consultations relating to a process for third party personal data risk management / contracting, and
   7. Other regulatory instruments, as necessary.
2. Support the integration of personal data protection into other relevant offices’ and divisions’ policies, procedures and guidance which do not relate to beneficiary data, such as
   1. Policies, procedures and processes of Supply Division
   2. Policies, procedures and processes of Division of Human Resources
   3. Policies, procedures and processes of Division of Private Fundraising and Partnerships
   4. Policies, procedures and processes of Divisions of Global Communications and Advocacy
   5. In addition, act as a focal point to Supply Division, Division of Human Resources, Division of Private Fundraising and Division of Global Communications and Advocacy, and,
   6. Collaborate closely with other members of the data protection team to ensure beneficiary related policies procedures and guidance are aligned with the UNICEF Policy on Personal Data Protection,
3. Ensure that any templates with legal relevance, such as legal agreements, will be aligned with the UNICEF Policy on Personal Data Protection
   1. Oversee alignment of data protection templates and guidance with legal templates
   2. Privacy notice template and guidance
   3. Act as a focal point for the Legal Office
4. Design and support the data protection governance structure for compliance monitoring/oversight purposes, including monitor policy implementation and coordinate the implementation of a legal redress mechanism for data subjects
5. Provide technical support to offices and divisions on legal/governance data protection matters, such as for example:
   1. Global/local data sharing agreements and guidance
   2. Data protection language for the Cooperation Agreement with National Committees
   3. Privacy notice for UNICEF employees
   4. Together with other relevant data protection team members, support offices’ handling of data subject requests and data subject complaints

To qualify as an advocate for every child you will have…

Minimum requirements:

• Education:

  •           Master’s degree in international law, data protection and privacy law, or other related field

  •           Data protection certifications are an asset

  *A first level university degree combined with an additional two years of professional experience may be accepted in lieu of an advanced university degree.

• Work Experience: At least 5 years of working experience in personal data protection and privacy with a strong expertise in data protection legal matters, corporate governance and individual rights in practice and training

  •           Good understanding of national and international data protection laws, such as GDPR, and its legal implications

  •           Prior experience working with a multilateral or UN organization is an asset

  •         Good understanding of corporate governance, organizational checks and balances, and decision-making processes

  •         Good understanding of the privacy challenges of technologies, including novel technologies such as artificial intelligence, big data and data protection and privacy and trends in reconciling them

  •           Proficiency in developing easily understandable guidance notes or contractual language on complex technical matters.

  •           Competent in advanced Excel, Word, data analytics and data visualization, including digital data flow.

  •         Demonstrated strong writing and presentation skills

  •           Strong analytical skills, attention to detail.

  •           Ability to translate business needs into technical requirements and translate complex concepts in a simple manner for a non-technical audience is highly desirable.

  •           Project management skills including task prioritization, workflow coordination, and results-driven strategies is desirable.

  •         Excellent organizational skills and ability to prioritize and manage multiple tasks.

Skills: 

• A strong team player with the ability to engage and motivate stakeholders.
• A good listener and excellent communicator, written and verbal communication, with a keen interest in bringing along others with diverse backgrounds and interests.
• Ability to connect with and mobilize support across levels, from leadership to specialists.
• Curiosity, resilience, and optimism

• Language Requirements: Fluency in English is required. Knowledge of another UN language is an asset.

For every Child, you demonstrate…

UNICEF’s Core Values of Care, Respect, Integrity, Trust and Accountability and Sustainability (CRITAS) underpin everything we do and how we do it. Get acquainted with Our Values Charter: UNICEF Values

The UNICEF competencies required for this post are…

(1) Builds and maintains partnerships

(2) Demonstrates self-awareness and ethical awareness

(3) Drive to achieve results for impact

(4) Innovates and embraces change

(5) Manages ambiguity and complexity

(6) Thinks and acts strategically

(7) Works collaboratively with others 

Familiarize yourself with our competency framework and its different levels.

UNICEF is here to serve the world’s most disadvantaged children and our global workforce must reflect the diversity of those children. The UNICEF family is committed to include everyone, irrespective of their race/ethnicity, age, disability, gender identity, sexual orientation, religion, nationality, socio-economic background, or any other personal characteristic.

We offer a wide range of measures to include a more diverse workforce, such as paid parental leave, time off for breastfeeding purposes, and reasonable accommodation for persons with disabilities. UNICEF strongly encourages the use of flexible working arrangements.

UNICEF does not hire candidates who are married to children (persons under 18). UNICEF has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and UNICEF, including sexual exploitation and abuse, sexual harassment, abuse of authority, and discrimination. UNICEF is committed to promoting the protection and safeguarding of all children. All selected candidates will undergo rigorous reference and background checks and will be expected to adhere to these standards and principles. Background checks will include the verification of academic credential(s) and employment history. Selected candidates may be required to provide additional information to conduct a background check.

UNICEF appointments are subject to medical clearance.  Issuance of a visa by the host country of the duty station is required for IP positions and will be facilitated by UNICEF. Appointments may also be subject to inoculation (vaccination) requirements, including against SARS-CoV-2 (Covid). Should you be selected for a position with UNICEF, you either must be inoculated as required or receive a medical exemption from the relevant department of the UN. Otherwise, the selection will be canceled.

Remarks:

As per Article 101, paragraph 3, of the Charter of the United Nations, the paramount consideration in the employment of the staff is the necessity of securing the highest standards of efficiency, competence, and integrity.

Government employees who are considered for employment with UNICEF are normally required to resign from their government positions before taking up an assignment with UNICEF. UNICEF reserves the right to withdraw an offer of appointment, without compensation, if a visa or medical clearance is not obtained, or necessary inoculation requirements are not met, within a reasonable period for any reason. 

UNICEF does not charge a processing fee at any stage of its recruitment, selection, and hiring processes (i.e., application stage, interview stage, validation stage, or appointment and training). UNICEF will not ask for applicants’ bank account information.

In this role, you will collaborate with colleagues across multiple locations. For effective collaboration, we encourage flexible working hours that accommodate different time zones while prioritizing staff wellbeing.

Mobility is a condition of international professional employment with UNICEF and an underlying premise of the international civil service.

All UNICEF positions are advertised, and only shortlisted candidates will be contacted and advance to the next stage of the selection process. An internal candidate performing at the level of the post in the relevant functional area, or an internal/external candidate in the corresponding Talent Group, may be selected, if suitable for the post, without assessment of other candidates.

Additional information about working for UNICEF can be found here.