Organizational Setting

The Data Protection Unit (DPU) is an independent function in the Office of the Director-General. It oversees and supports implementation of the FAO Data Protection Policy (DPP) through collaboration across FAO headquarters and decentralized offices at regional and country levels. The DPU is located in Rome, Italy and is also accountable to the Data Protection Oversight Committee (DPOC). 

The Data Protection Coordinator is not required to work on FAO premises and the work may be performed remotely.

Reporting Lines

The Data Protection Coordinator resides within the DPU and will report to the Head of the DPU.

Technical Focus 

Develop data protection procedures, guidelines and controls across the data lifecycle from data collection, processing, storage, transfer and disposal. Provide technical advice to FAO teams on matters relating to data protection compliance.

Tasks and responsibilities

The Data Protection Coordinator will, under the general supervision and guidance of the Head of the DPU (or the assigned Coordinator in the absence of the Head of DPU):

•    Draft new (and update existing) operational guidance and procedures for data protection;
•    Implement data protection procedures through new organisation processes and / or technical controls;
•    Respond to requests from data providers submitted in accordance with the Data Protection Policy;
•    Respond to internal requests for advice from FAO units and offices related to data protection matters;
•    Draft updates and reports to the Data Protection Oversight Committee (DPOC), the FAO Advisory Oversight Committee (OAC), Senior Management and FAO’s Governing Bodies on the status of data protection in FAO, as required;
•    Develop and/or review training and awareness materials to enhance understanding of data protection across FAO;
•    Represent FAO in meetings with, and collaborate with, counterparts in other UN System agencies to ensure consistency and coordination with UN System policy approaches with respect to data protection and intellectual property (only Consultants);
•    Perform any other duties, as required.

CANDIDATES WILL BE ASSESSED AGAINST THE FOLLOWING

Minimum Requirements

•    University degree in relevant discipline such as, but not limited to law, data protection, information management, information systems management, business, information security, computer science, and information technology. 
•    At least five (5) years of relevant experience in data protection, privacy, information security, data ethics or related discipline.
•    Working knowledge of English and limited knowledge of one of Spanish, French, Arabic, Chinese or Russian (for Consultants). Working knowledge of English (for PSAs). 

FAO Core Competencies

•    Results Focus
•    Teamwork
•    Communication
•    Building Effective Relationships
•    Knowledge Sharing and Continuous Improvement

Technical/Functional Skills 

•    Work experience in more than one location or area of work.
•    Experience in international organisations and the legal framework within which they operate.
•    Experience in compliance with data protection frameworks such as ISO 27701, GDPR, or other national or state privacy regulation. 
•    Experience with managing data providers' requests, concerns, and data breaches.

Selection Criteria

•    Data protection certification is desired, such as Certified Information Privacy Professional (CIPP), Certified Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Information Systems Security Professional (CISSP).