Mercy Corps is powered by the belief that a better world is possible. To do this, we know our teams do their best work when they are diverse and every team member feels that they belong. We welcome diverse backgrounds, perspectives, and skills so that we can be stronger and have long term impact.

The Team

This role will report to the Head of Operations and Data Protection, or relevant delegate as part of the wider European Operations team.

The Position

• Provide support to the Head of Operations and Data Protection on all aspects of European Data Protection.

• Act as an internal point of contact on European data protection and privacy issues including providing pragmatic advice and guidance to colleagues primarily European headquarters based operating in a global context.

• Keep abreast of developments and updates from the Autoriteit Persoonsgegevens (AP) and European Data Protection Board, including engagement in relevant networks and with peer agencies, as relevant and as requested by your manager.

Essential Responsibilities

DATA PROTECTION AND PRIVACY

• Support in the development and delivery and tracking of onboarding and refresher trainings across the European team.
• In association with department heads identify the needs and lead an on-going suite of data protection awareness programmes tailored to meet the needs of team members and ensure all team members are aware of their responsibilities regarding data protection.

• Work with the Head of Operations and Data Protection to track divergences between the GDPR and UK Data Protection legislation.

• In collaboration with the Head of Operations & Data Protection, carry out quarterly reviews of the MCNL ROPA with department leads and provide advice and guidance.

• Regularly review all MCNL data protection policies and procedures and suggest updates as appropriate. Support the roll out and implementation of policies and procedures

• In collaboration with the Head of Operations & Data Protection, review or support in drafting Privacy Impact Assessments where appropriate on processing of personal data and provide guidance to ensure that all new systems or processes implement privacy by design.

• Work in collaboration with the Head of Operations & Data Protection and Director of Compliance Governance & Risk to maintain and update a data protection risk register.

• In collaboration with Head of Operations & Data Protection, IT and other departments as appropriate, handle and process and record Data Subject Access Requests in a timely and efficient manner, ensuring compliance with data protection regulations.

• In collaboration with the Head of Operations & Data Protection and other stakeholders as relevant, ensure that data incidents are recorded, investigated and reported as necessary, with a particular responsibility for any reporting to the Dutch AP.

• In collaboration with the HeaAd of Operations & Data Protection, advise on cross border transfer requirement including Standard Contractual Clauses

• In collaboration with the Head of Operations & Data Protection, provide cover for the MCE data protection email address.

• Serve as part of the MCE and MCNL Data Oversight group in a support role.

• Provide support to and collaborate with the Head of Operations & Data Protection on Data Protection related matters.

• Provide support to and collaborate with the Head of Operations & Data Protection for being a champion of Data Protection compliance.

• In collaboration with the Head of Operations & Data Protection, create an open and approachable environment for colleagues seeking guidance.

Supervisory Responsibility

None.

Accountability

Reports Directly To: Head of Operations & Data Protection, Europe.

Works Directly With: Managing Director, Mercy Corps Netherlands, Director of Compliance Governance & Risk, Global Data Protection and Privacy team.

Accountability to Participants and Stakeholders

Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.

Minimum Qualifications & Transferable Skills

• Data protection qualification (such as IAPP) or relevant degree preferred but not essential
• 2+ years of experience as a Data Protection Officer, Compliance Officer or other relevant position.
• Knowledge of EU General Data Protection Regulation (GDPR) as well as International data protection rules.
• Familiar with data processing operations and computer security systems will be preferred.
• Expert knowledge of data protection law and practices will be an advantage.
• Maintain ethics to report all non-compliances and remain impartial.
• Excellent spoken and written English required and Dutch at a native speaker level preferred.

Success Factors

• Excellent organizational and management skills.
• Strong oral and written communication skills.
• Ability to handle confidential information.
• Attention to detail.
• Ability to multitask.
• Good time management skills.

Living Conditions / Environmental Conditions

The position is based in The Hague and may require limited travel to Mercy Corps HQ locations in Europe.

Ongoing Learning

In support of our belief that learning organizations are more effective, efficient and relevant to the communities we serve, we empower all team members to dedicate 5% of their time to learning activities that further their personal and/or professional growth and development.

Diversity, Equity & Inclusion

Achieving our mission begins with how we build our team and work together. Through our commitment to enriching our organization with people of different origins, beliefs, backgrounds, and ways of thinking, we are better able to leverage the collective power of our teams and solve the world’s most complex challenges. We strive for a culture of trust and respect, where everyone contributes their perspectives and authentic selves, reaches their potential as individuals and teams, and collaborates to do the best work of their lives.

We recognize that diversity and inclusion is a journey, and we are committed to learning, listening and evolving to become more diverse, equitable and inclusive than we are today.

Equal Employment Opportunity

Mercy Corps is an equal opportunity employer that does not tolerate discrimination on any basis. We actively seek out diverse backgrounds, perspectives, and skills so that we can be collectively stronger and have sustained global impact.

We are committed to providing an environment of respect and psychological safety where equal employment opportunities are available to all. We do not engage in or tolerate discrimination on the basis of race, color, gender identity, gender expression, religion, age, sexual orientation, national or ethnic origin, disability (including HIV/AIDS status), marital status, military veteran status or any other protected group in the locations where we work.

Safeguarding & Ethics

Mercy Corps is committed to ensuring that all individuals we come into contact with through our work, whether team members, community members, program participants or others, are treated with respect and dignity. We are committed to the core principles regarding prevention of sexual exploitation and abuse laid out by the UN Secretary General and IASC and have signed on to the Interagency Misconduct Disclosure Scheme. We will not tolerate child abuse, sexual exploitation, abuse, or harassment by or of our team members. As part of our commitment to a safe and inclusive work environment, team members are expected to conduct themselves in a professional manner, respect local laws and customs, and to adhere to Mercy Corps Code of Conduct Policies and values at all times. Team members are required to complete mandatory Code of Conduct elearning courses upon hire and on an annual basis.

As a safeguarding measure, Mercy Corps screens all potential employees. This is done following the conclusion of recruitment and prior to assuming full employment.

Our screening process is designed to be transparent and completed in partnership with new Team Members. You will have the opportunity to disclose any prior convictions at the conclusion of the recruitment process before the check is initiated. We ask that you do not disclose any prior convictions in your application materials or during the recruitment process.