Senior Privacy Officer

<!–

Description

–>

• The Senior Privacy Officer will report directly to the Chief Data Privacy Officer and will be the second most senior staff member in the DPO.  He/she/they will perform tasks as assigned by the Chief Data Privacy Officer and will supervise the work of other DPO staff. The Senior Privacy Officer will provide program management support to the Chief Data Privacy Officer in his/her/their function to oversee the World Bank’s compliance with the WBG Policy on Personal Data Privacy. These tasks include the following:
• Leading privacy strategy and outreach efforts of the DPO, including advising on strategic processes and identifying key priorities, securing resources, and improving the efficiency and effectiveness of the DPO.  
• Supporting the Chief Data Privacy Officer with Board and Senior Management engagement on data privacy as well as coordinating the DPO’s reporting to Corporate Committees. 
• Conducting outreach and training with stakeholders across the World Bank and liaising with counterparts in different business units to ensure integration of the Data Privacy Office’s work in every aspect of World Bank activity.
• Collaborating with other data management functions within the World Bank to efficiently integrate privacy compliance into other World Bank data governance initiatives, including areas such as Artificial Intelligence, Procurement, and Information Technology.
• Supporting the effective exercise of privacy governance by conducting ongoing compliance monitoring, assisting with inquiries, and providing counseling, guidance, technical advice and support to business units regarding use, collection and sharing of personal data.
• Building systems and processes to support a scalable privacy program.
• Overseeing completion of privacy assessments, DPIAs, and RPAs to identify and mitigate privacy risk.
• Providing support and expertise to DPO staff undertaking contract and vendor review to ensure consistent application of privacy controls and contract language.
• Ensuring the availability of up-to-date templates for privacy notices and other required documents for use by staff and business units.
• Supervising the delivery of the annual WBG Data Privacy Day and the annual updating and roll-out of the mandatory for all Data Privacy eLearning course. 
• Coordinating with other World Bank Group institutions regarding the implementation of the WBG Privacy Policy.
• As needed, handling privacy incidents, inquiries and escalations and serving as the DPO representative for incident response and mitigation efforts.
• Supporting the budget planning for the DPO.
• Mentoring less experienced or junior colleagues.
• Performing other tasks, as and when needed to assist in the DPO’s work and to ensure the orderly functioning of the DPO.

• Degree in Law or Master’s degree in data-related sciences or political science, international relations or similar field. 
• At least 8 years of relevant privacy experience, including international organization, in-house, or government experience.
• CIPP (Certified Information Privacy Professional) and/or CIPM (Certified Information Privacy Manager) designation by IAPP (International Association of Privacy Professionals) or demonstrable experience in privacy or related program management.
• Experience in building and maintaining a global privacy program.
• Strategic problem-solving skills with excellent legal and business judgment and ability to think flexibly and creatively.
• Facility with privacy clauses in contracts.
• Excellent written and oral English skills.  
• Demonstrated good judgment and ability to manage multiple responsibilities with various stakeholders, often under time pressure.
• Excellent communication and collaboration skills with counterparties inside and outside the World Bank.
• People management experience, including managing a diverse workforce, is a plus.
• Proficiency with standard IT software packages (e.g., MSWord, PowerPoint, Excel). Database and document management system experience a plus, including proficiency with OneTrust or similar privacy compliance technology.  

<!—

<!–

–>