Data Protection Legal Adviser (800793)

What we do

Since 1863, the International Committee of the Red Cross (ICRC) has worked to preserve human dignity and relieve suffering caused by war and armed violence.

In collaboration with our Red Cross and Red Crescent partners around the world, we do everything we can to deliver life-saving aid, reconnect families and locate missing people – helping those who need it most, regardless of who they are and what side of the front line they are on.

We engage with authorities and armed forces on all sides, often confidentially, pressing for access to detainees to improve their living conditions and urging compliance with international humanitarian law to protect non-combatants, including from digital threats.

Purpose of the role

As a member of the Data Protection Office (DPO), the position holder contributes to safeguarding the ICRC's ability to process personal data responsibly and in line with its mandate, notably in sensitive humanitarian contexts. The role covers two core areas of responsibility:

Supervision and monitoring of the application of ICRC Rules on Personal Data Protection in the processing of personal data within the ICRC, ensuring that data processing activities across the organization remain compliant and that risks are identified and addressed in a timely manner.

Support to ICRC departments and delegations in the implementation of ICRC Rules on Personal Data Protection, providing legal analysis and advice; notably ensuring policy developments and Data Protection by Design and by Default, so that data protection considerations are embedded from the outset in new tools, processes, and initiatives across the organization.

Accountabilities & functional responsibilities

Support Delegations and Regions, and ICRC Departments in the implementationof ICRC Rules on Personal Data Protection:

• Advises on the effective application of ICRC Rules on Personal Data Protectionand related Policies (notably the Biometrics Policy) and guidelines.
• Develops procedures, guidelines, and templates/forms, including Information Notices and ToUs.
• Engages and advices on engagements with stakeholders on data protection and privacy issues, including the negotiation of data processing or data sharing agreements.
• Ensures the implementation of Data Protection by design and by default in projects or within the development of new data processing. Including:
  
  • Support to DPIAs,
  • Implements the Cloud Strategy framework when applicable: support to Data Classification, Legal Assessment, and review of the Risk Management frame workin coordination with relevant departments.
  • Supports the contractual agreements in line with ICRC Rules
  Advertisement

As a member of the DPO

• Advises on the management of data breaches in coordination with information security and in support of the staff in charge,
• Supports the development and update of ICRC Rules and related policies,
• Ensures data subjects can exercise their rights,
• Supports the monitoring of the application of ICRC Rules within the institution, and Identify issues and/or cases that should be transmitted to the ICRC Independent Commission on Data Protection,
• Provides trainings or information session on Data Protection to the ICRC departments,
• Participates to external engagement or to relevant panels and events,
• Monitors relevant DP/ Privacy legal developments and conduct ad hoc researchon DP in Humanitarian action questions,
• Ensures a proper information management of DPO documentation, guidance, guidelines, findings, opinions, advisory opinions and inputs.

Education and experience required

• Bachelor’s or Master’s degree in Law, International Law, or Human Rights
• Strong knowledge of data protection law, supported by Data Protection Officer certification
• Excellent written and spoken English; proficiency in French or Spanish is a valuable asset
• Skilled in Microsoft Office (Word, Excel, PowerPoint)
• 10–12 years of overall professional experience
• Approximately 5 years as a legal adviser or attorney is a strong an asset
• Around 2 years of experience in data protection or privacy (an asset)
• Operational experience in the humanitarian sector, ideally as a program coordinator, manager, or in a similar role

Additional information

• Location: Geneva
• Type of contract: Open-ended
• Mobility Type: Long Term Assignment
• Activity rate: 100%
• Start date: 1st December 2026
• Recruiter: Alejandra Rodriguez, HQ Recruiter
• Application deadline: Sunday, 4th of October 2026

The ICRC values diversity and is committed to creating an inclusive working environment. We welcome applications from all qualified candidates.

Are you ready to explore the next chapter of your career? Apply now!

For more information about working at ICRC HQ please click here

Our values

• At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviors based on these shared values. For more information on the ICRC values, please visit this page.