Background:

UN Women, grounded in the vision of equality enshrined in the Charter of the United Nations, works for the elimination of discrimination against women and girls; the empowerment of women; and the achievement of equality between women and men as partners and beneficiaries of development, human rights, humanitarian action and peace and security.

The Division of Management and Administration (DMA) is responsible for the management of financial, operational and administrative resources including information communications and technology, procurement, security and facilities and asset management. The goal is to ensure the effective and efficient delivery of essential operations services in UN Women, continuous development and improvement in operations, policies, and methods to align with UN Women and stakeholders' evolving business needs and advisory support to the Executive Director in the formulation and implementation of the UN Women overall mission, strategy and plans of actions. 

UN Women has endorsed the UN Principles on Personal Data Privacy and Protection (https://unsceb.org/privacy-principles ) and has promulgated its own Data Protection Policy incorporating these principles. The UN Secretary-General is currently focusing on managing data as a strategic asset and that includes data protection and privacy, having an appropriate classification system and making information accessible when appropriate. 

Under the supervision of the Deputy Director of Division of Management and Administration the Data Protection Specialist (DPO) will be responsible for building, implementing and managing its data protection and privacy program, monitoring compliance with the program and acting as a main point of contact for data protection and privacy issues. This will include implementation of the UN Women Personal Data Protection Policy, training of personnel, analytical work and substantive technical support to UN Women Business Units. The work will also include other Policies related to Data Protection and Privacy such as Public Access to Information, which has already been promulgated, as well as areas related to classification and records management in line with the Personal Data Protection Policy.

This temporary appointment position will be for a duration of 364 days. Whereas an external candidate will be offered a temporary appointment, subject to release agreements, staff members in UN Women may be administered as a temporary assignment and staff members in the UN Common system may be administered under a loan arrangement.

Key Functions and Accountabilities:

Develop Data protection and privacy procedures and guidance and other required documents for UN Women

• Develop procedure and guidance as outlined in the implementation plan
• Provide advice on whether UN Women needs additional procedures and guidance not identified in the implementation plan
• Revise and update existing PPGs related to the implementation and management of data protection and privacy or information in general
• Provide guidance to offices on the interpretation and implementation of the Personal Data Protection Policy and other policies related to management of information
• Provide inputs to the Records Management Policy and Procedure as these documents relate to personal data
• Provide policy and technical advice to UN Women personnel and managers as requested
• Raise issues related to data protection policies, procedures and guidance with senior management
• Provide template language for providing privacy notices and obtaining consents.
• Provide template language for other templates needed for the implementation of UN Women’s Data Protection and Privacy Program

Manage the day-to-day work in building and maintaining UN Women’s data protection and privacy program

• Manage the implementation and maintenance of the UN Women Data Protection and Privacy Program on a day-to-day basis under the guidance and leadership of the DMA Deputy Director
• Provide technical guidance to UN Women offices in developing data protection and privacy language for UN Women’s contract templates 
• Provide technical guidance to offices in negotiating data protection and privacy clauses with contractual counterparties
• Act as the main point of contact and liaison for all data protection and privacy issues within UN Women and with other UN system organizations and for data subjects
• Liaise with IST on providing business requirements for creating and maintaining records of processing activities 
• Represent UN Women in UN groups and initiatives working with data protection and privacy   
• Provide technical advice to UN Women offices on classification of personal data and in coordination with IST on appropriate protection of personal data
• Provide advice and instructions on how to conduct data protection impact assessments (DPIAs)
• Provide guidance to UN Women Business Units on inserting privacy enhancing activities into their project lifecycles, in consultation with IST
• Provide technical support to UN Women offices in responding to data subjects
• Provide inputs to IST on the requirements for appropriate controls for the protection of personal data

Provide technical advice on privacy and security risk management

• Provide technical advice on appropriate sharing of personal data with external parties (e.g., beneficiaries, partners, vendors and donors)
• Provide technical advice on the response to data incidents involving personal data in collaboration with Information Security Team.
• Provide technical advice on appropriate access rights to personal data in collaboration with IST and UN Women offices

Provide compliance management and reporting support

• Monitor compliance of data protection and privacy
• Provide reports to the DMA Director through the DMA Deputy Director on the compliance of the Personal Data Protection Policy

Report on audit privacy findings to the DMA Director through the DMA Deputy Director, as appropriate

• Manage capacity development and knowledge management initiatives related to data protection and privacy in UN Women
• Determine, with relevant stakeholders, training requirements
• Coordinate training and awareness activities for UN Women Business Units
• Conduct training or awareness raising activities if needed 

The incumbent performs other duties within their functional profile as deemed necessary for the efficient functioning of the Office and the Organisation.

Competencies :

Core Values:

• Integrity;
• Professionalism;
• Respect for Diversity.

Core Competencies:

• Awareness and Sensitivity Regarding Gender Issues;
• Accountability;
• Creative Problem Solving;
• Effective Communication;
• Inclusive Collaboration;
• Stakeholder Engagement;
• Leading by Example.

Please visit this link for more information on UN Women’s Values and Competencies Framework: 

Functional Competencies:

• Affinity with UN Women mandate on Gender equality and women’s empowerment
• Ability to evaluate the impact on UN Women’s activities in relation to the implementation of the Personal Data Protection Policy
• Ability to provide assurance and advise on Strategy Development, Privacy Operations, Privacy and Security Risk Management and Compliance Management
• Ability to work in cross functional team and lead the day to day management and implementation of the Personal Data Protection Policy
• Knowledge of the UN Personal Data Protection and Privacy Principles or other data protection and privacy legislation would be an asset. 
• Detailed oriented
• Strong analytical skills
• Team player

Recruitment Qualifications:

Education and Certification:       

•              Master’s degree or equivalent in law or a field relevant for building, implementing, managing and monitoring compliance of a data protection and privacy program is required.

•              A first-level university degree in combination with two additional years of qualifying experience may be accepted in lieu of the advanced university degree.

•              A certification as a privacy professional from the International Association of Privacy Professionals (IAPP) or similar association would be an asset.

Experience:        

•              At least 7 years of progressively responsible work experience in law or relevant field is required.

•              At least 3 years’ experience of working in data protection and privacy is required.

•              Experience of building, implementing and managing data protection and privacy programs is desirable.

•              Experience in developing of revising policy related to data protection and privacy or related field is desirable.

•              Experience developing capacity of stakeholders related to data protection and privacy or a related field is desirable.

Languages:

•              Fluency in English is required.

•              Knowledge of another official UN language is desirable (French, Arabic, Chinese, Russian or Spanish).

Statements :

In July 2010, the United Nations General Assembly created UN Women, the United Nations Entity for Gender Equality and the Empowerment of Women. The creation of UN Women came about as part of the UN reform agenda, bringing together resources and mandates for greater impact. It merges and builds on the important work of four previously distinct parts of the UN system (DAW, OSAGI, INSTRAW and UNIFEM), which focused exclusively on gender equality and women's empowerment.

Diversity and inclusion:

At UN Women, we are committed to creating a diverse and inclusive environment of mutual respect. UN Women recruits, employs, trains, compensates, and promotes regardless of race, religion, color, sex, gender identity, sexual orientation, age, ability, national origin, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, competence, integrity and organizational need.

If you need any reasonable accommodation to support your participation in the recruitment and selection process, please include this information in your application.

UN Women has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and UN Women, including sexual exploitation and abuse, sexual harassment, abuse of authority and discrimination. All selected candidates will be expected to adhere to UN Women’s policies and procedures and the standards of conduct expected of UN Women personnel and will therefore undergo rigorous reference and background checks. (Background checks will include the verification of academic credential(s) and employment history. Selected candidates may be required to provide additional information to conduct a background check.)

Note: Applicants must ensure that all sections of the application form, including the sections on education and employment history, are completed. If all sections are not completed the application may be disqualified from the recruitment and selection process.