Overview

Reports to the Country Program Manager, the Senior Data and Compliance Officer collaborates with stakeholders to identify risks that may impede Jhpiego’s objectives. Oversees Jhpiego’s data protection strategy and ensures compliance with the Data Protection Act. The incumbent assesses the adequacy of internal control systems and updates internal data protection policies and recommends appropriate measures to mitigate associated risks. Under the Country Program Manager’s oversight, the Senior Data Compliance Officer provides guidance, training, and compliance oversight for procurement, inventory management, subrecipient monitoring, and financial management. This role involves close collaboration with senior management, finance, administrative, and human resources staff to ensure compliance with Jhpiego, Johns Hopkins University, the Data Protection Act, and donor regulations.

Responsibilities

• Works with senior management to strengthen data management, compliance and Internal control systems to minimize organizational risks.
• Verifies compliance with donor regulations, organizational policies and applicable laws through technical assistance and spot checks.
• Develops and implements annual compliance review plans to ensure full coverage of all projects.
• Conducts monthly QBE due diligence reviews and submits reports to senior management within required timelines.
• Carries out Data Protection Impact Assessments (DPIAs) and advises staff and management on data privacy obligations.
• Leads data breach investigations, assesses severity levels and coordinates mandatory reporting to regulatory authorities.
• Monitors and verifies compliance of local partners and sub-recipients with donor requirements, organizational policies and applicable laws.
• Participates in financial review meetings and presents compliance findings, due diligence results and updates on corrective actions.
• Promotes data protection awareness and educates staff on privacy and data management best practices.
• supports internal data and compliance reviews as required.
• prevent fraud through active monitoring and evaluation of internal practices and procedures.
• Develops, promotes and delivers training on internal controls, compliance best practices, and related topics.
• Ensures compliance with donor debarment requirements and anti-terrorism regulations.
• Conducts staff orientations and refresher training on organizational policies, procedures, data protection and compliance requirements.

Required Qualifications

• Bachelor’s degree in finance, Business Administration, Computer Science, Information Security or law.
• Master’s degree in business administration is an added advantage.
• 8-9 years of internal or external audit experience.
• Experience in project management and a deep understanding of data privacy laws, risk management principles and information security.
• Work experience with an NGO or grant-related entity
• Willingness to travel internally and throughout the country.
• Strong interpersonal skills and knowledge of U.S.G. donor rules and regulations
• Strong computer skills including Excel, Word, and WordPerfect applications.
• Excellent interpersonal, organizational, and conflict management skills
• Ability to work in a complex environment with multiple tasks, short deadlines and intense pressure to achieve desired results.
• Strong communication (writing, report writing, and oral presentation) skills.
• Ability to work independently with very little supervision.
• A person with high integrity and honesty.

• Works with senior management to strengthen data management, compliance and Internal control systems to minimize organizational risks.
• Verifies compliance with donor regulations, organizational policies and applicable laws through technical assistance and spot checks.
• Develops and implements annual compliance review plans to ensure full coverage of all projects.
• Conducts monthly QBE due diligence reviews and submits reports to senior management within required timelines.
• Carries out Data Protection Impact Assessments (DPIAs) and advises staff and management on data privacy obligations.
• Leads data breach investigations, assesses severity levels and coordinates mandatory reporting to regulatory authorities.
• Monitors and verifies compliance of local partners and sub-recipients with donor requirements, organizational policies and applicable laws.
• Participates in financial review meetings and presents compliance findings, due diligence results and updates on corrective actions.
• Promotes data protection awareness and educates staff on privacy and data management best practices.
• supports internal data and compliance reviews as required.
• prevent fraud through active monitoring and evaluation of internal practices and procedures.
• Develops, promotes and delivers training on internal controls, compliance best practices, and related topics.
• Ensures compliance with donor debarment requirements and anti-terrorism regulations.
• Conducts staff orientations and refresher training on organizational policies, procedures, data protection and compliance requirements.

• Strong interpersonal skills
• Strong computer skills including Excel, Word, and WordPerfect applications.
• Excellent interpersonal, organizational, and conflict management skills
• Strong communication (writing, report writing, and oral presentation) skills.
• Ability to work independently with very little supervision.
• High integrity and honesty.

• Bachelor’s degree in finance, Business Administration, Computer Science, Information Security or law.
• Master’s degree in business administration is an added advantage.
• 8-9 years of internal or external audit experience.
• Experience in project management and a deep understanding of data privacy laws, risk management principles and information security.
• Work experience with an NGO or grant-related entity
• Willingness to travel internally and throughout the country.
• Knowledge of U.S.G. donor rules and regulations