Background

UN Women, grounded in the vision of equality enshrined in the Charter of the United Nations, works for the elimination of discrimination against women and girls; the empowerment of women; and the achievement of equality between women and men as partners and beneficiaries of development, human rights, humanitarian action and peace and security.

 

The Division of Management and Administration (DMA) is responsible for the management of financial, operational and administrative resources including information communications and technology, procurement, security and facilities and asset management. The goal is to ensure the effective and efficient delivery of essential operations services in UN Women, continuous development and improvement in operations, policies, and methods to align with UN Women and stakeholders' evolving business needs and advisory support to the Executive Director in the formulation and implementation of the UN Women overall mission, strategy and plans of actions.

UN Women has endorsed the UN Principles on Personal Data Privacy and Protection (https://unsceb.org/privacy-principles) and has promulgated its own Personal Data Protection Policy incorporating these principles. The UN Secretary-General is currently focusing on managing data as a strategic asset and that includes data protection and privacy, having an appropriate classification system and making information accessible when appropriate.

Duties and Responsibilities

Under the supervision of the Deputy Director of Division of Management and Administration the Senior Legal and Data Protection & Privacy consultant (hereafter referred to as senior consultant) will be responsible for the day-to-day management of the implementation of the Personal Data Protection Policy as per Implementation Plan and the day-to-day work relating to the Information Governance Project. Moreover, the senior consultant will be responsible for managing the finalization of the Public Access to Information Policy and the Classification Policy and developing procedures, guidance and other documents necessary for the implementation of the Personal Data Protection Policy. The work will also include training of personnel, analytical work and substantive technical support to UN Women offices.

 

Scope of work

1. Lead the day-to-day implementation of the Personal Data Protection Policy

· Lead the implementation of the Personal Data Protection Policy on a day-to-day basis under the guidance and leadership of the DMA Deputy Director

· Develop data protection and privacy language for UN Women’s contract templates and develop templates for joint controller agreements, data processing agreements and transfer agreements

· Provide technical guidance to UN Women offices in negotiating data protection and privacy clauses with contractual counterparties

· Act as the main point of contact and liaison for all data protection and privacy issues within UN Women and with other UN system organizations and for data subjects

· Liaise with IST and other sections on providing business requirements for creating and maintaining records of processing activities

· Represent UN Women in UN groups and initiatives working with data protection and privacy

· Provide technical advice to UN Women offices on classification of personal data and in coordination with IST on appropriate protection of personal data

· Provide advice and instructions on how to conduct data protection impact assessments (DPIAs)

· Provide guidance to UN Women offices on inserting privacy enhancing activities into their project lifecycles, in consultation with IST

· Provide technical support to UN Women offices in responding to data subjects

· Provide inputs to IST on the requirements for appropriate controls for the protection of personal data

· Develop Procedures/Guidance/Templates, as needed, for developing Records of Processing Activities, data breach management, conducting Data Protection Impact Assessments, data protection by design and by default, privacy notices, handling data subjects’ requests and data sharing

2. Lead and Manage the day-to-day work relating to the Information Governance Project

· Manage the day-to-day work relating to the Information Governance Project under the guidance and leadership of the DMA Deputy Director

· Manage the finalization of the Public Access to Information Policy including revising Policy if needed

· Manage the finalization of the Classification Policy including revising Policy if needed

· Develop any Procedure or Guidance needed in the context of Public Access to Information Policy and the Classification Policy.

 

· Develop content and present the content at Information Governance Project Board meetings

 

3. Lead to develop Data protection and privacy procedures and guidance and other documents required for the implementation of the Personal Data Protection Policy

· Develop procedures and guidance as outlined in the Implementation Plan

· Provide advice on whether UN Women needs additional procedures and guidance not identified in the Implementation Plan

· Revise and update existing policy, procedure and guidance (PPGs) related to the implementation and management of data protection and privacy or information in general

· Provide guidance to UN Women offices on the interpretation and implementation of the Personal Data Protection Policy and other policies related to management of information

· Provide inputs to the Records Management Policy and Procedure as these documents relate to personal data

· Provide policy and technical advice to UN Women personnel and managers as requested

· Provide template language for providing privacy notices and obtaining consents.

· Provide template language for other templates as needed for the implementation of the Personal Data Protection Policy

 

4. Provide technical advice on privacy risk management

· Provide technical advice on appropriate sharing of personal data with external parties (e.g., beneficiaries, partners, vendors and donors)

· Provide technical advice on the response to data incidents involving personal data in collaboration with the Information Security Team.

· Provide technical advice on appropriate access rights to personal data in collaboration with IST and UN Women offices

 

5. Other work relating to data privacy and protection

· Manage capacity development and knowledge management initiatives related to data protection and privacy in UN Women

· Determine, with relevant stakeholders, training requirements

· Coordinate training and awareness activities for UN Women offices

· Conduct training or awareness raising activities if needed

· Perform other responsibilities relating to data protection and privacy and information management as may be assigned by supervisor.

Competencies

Ethics and Values:

· Demonstrate and safeguard ethics and integrity

· Continuous Learning and Knowledge Sharing

· Shares knowledge across the team and encourages learning and sharing of knowledge

· Work in teams

· Demonstrate ability to work in a multicultural, multiethnic environment and to maintain effective working relations with people of different national and cultural backgrounds

 

Functional Competencies:

· In-depth knowledge of development issues and UN functioning

· Ability in strategic planning, results-based management and reporting;

· Strong knowledge of relevant UN system organizational policies and procedures;

· Excellent Ability to write, speak and present in English;

· Consistently approaches work with energy and a positive, constructive attitude;

· Demonstrates strong skills in knowledge and information management and mapping;

· Excellent oral communication, interpersonal and coordination skills;

· Excellent presentation and facilitation skills;

· Ability to establish priorities for self and others, and to work independently;

· Ability to remain calm, in control and good humored even under pressure;

· Demonstrates openness to change, flexibility, and ability to manage complexities;

· Demonstrated consciousness and efficiency in meeting commitments, observing deadlines and achieving results;

· Strong IT skills (PPT, Word, Excel).

Required Skills and Experience

NOTE: All applicants must address each selection criteria detailed below with specific and comprehensive information supporting each item.

 

Education

· Master’s degree (or equivalent) in Law is required

· A first-level university degree in combination with two additional years of qualifying experience may be accepted in lieu of the advanced university degree.

 

Experience

· At least 10 years of legal experience in the UN system;

· 3 years of experience working with data protection and privacy;

· Working knowledge of mission-driven organizations and the UN system (

· Experience in Design and Development of policies and procedures;

· Experience of project management and project implementation;

· Experience in drafting contracts (experience working with drafting of UN contracts would be considered an advantage);

· Experience in training personnel;

· Strong Communication skills, both written and verbal;

· Experience in coordinating different units/department.

 

Language

· Excellent speaking and written English, other UN languages would be an advantage.

 

Application Procedures

Interested applicants for this position must submit the following or the application will not be considered: UN Women Personal History form (P-11) which can be downloaded from http://www.unwomen.org/about-us/employment;

 

Brief description of why the individual considers him/herself as the most suitable for the assignment;