Data Protection Specialist, Based

FAO; Roma; In loco; EUR 67.000 - 100.000; Tempo pieno

Descrizione del lavoro

FAO is seeking a Data Protection Specialist (Consultant/PSA) for a remote, home-based assignment of 6 months. The role supports the Data Protection Unit by developing procedures, guiding divisions, and responding to data subject requests.

You will contribute to training and reporting to governance bodies and collaborate with UN system peers. The ideal candidate has an advanced degree and at least five years in data protection/privacy, with strong knowledge of GDPR and data lifecycle processes.

Competenze

• Advanced university degree in a relevant discipline (law, data protection, information management, IT)
• Minimum 5 years in data protection/privacy or related field
• Strong knowledge of GDPR/privacy regulations and data lifecycle concepts
• Experience in international organisations is desirable

Mansioni

• Draft and update data protection guidance and procedures.
• Guide divisions on new processes, standards, and technical controls.
• Respond to data subject requests under the Data Protection Policy.
• Provide advice to FAO units & offices on data protection matters.
• Develop and review training materials to raise awareness of data protection.
• Prepare updates/reports for DPOC, OAC, Senior Management and FAO Governing Bodies.
• Represent FAO in meetings with UN system partners on data protection and IP matters (for consultants).
• Perform additional duties as required.

Conoscenze

Data protection

Privacy

Information security

Policy guidance

Risk assessment

English (C1)

Formazione

Advanced degree in relevant field

Strumenti

GDPR knowledge

ISO 27701

Descrizione del lavoro

Job Description - Data Protection Specialist (2601889)

Job Description

CALL FOR EXPRESSIONS OF INTEREST - VACANCY ANNOUNCEMENT : 2601889

Data Protection Specialist

Job Posting

07/Sep/2026

Closure Date

21/Sep/2026, 9:59:00 PM

Organizational Unit : ODGP - Data Protection unit

Job Type

Non-staff opportunities

Type of Requisition : Consultant / PSA (Personal Services Agreement)

Primary Location

Home-Based

Duration : 6 months

Post Number : N/A

IMPORTANT NOTICE: Please note that Closure Date and Time displayed above are based on date and time settings of your personal device

• FAO is committed to achieving workforce diversity in terms of gender, nationality, background and culture.
• Qualified female applicants, qualified nationals of non-and under-represented Members and person with disabilities are encouraged to apply;
• Everyone who works for FAO is required to adhere to the highest standards of integrity and professional conduct, and to uphold FAO's values
• FAO, as a Specialized Agency of the United Nations, has a zero-tolerance policy for conduct that is incompatible with its status, objectives and mandate, including sexual exploitation and abuse, sexual harassment, abuse of authority and discrimination
• All selected candidates will undergo rigorous reference and background checks
• All applications will be treated with the strictest confidentiality

FAO’s commitment to environmental sustainability is integral to our strategic objectives and operations.

Organizational Setting

The Data Protection Unit (DPU) is an independent function in the Office of the Director-General. It supports and monitors implementation of the FAO Data Protection Policy (DPP), as amended, through collaboration across FAO headquarters and decentralized offices at regional and country levels. The DPU reports on policy compliance to the Data Protection Oversight Committee.

The Data Protection Specialist is not required to work on FAO premises and the work may be performed remotely.

Reporting Lines

The Data Protection Specialist resides within the DPU and will report to the Head of the DPU.

Technical Focus

Develop data protection procedures, guidelines and controls across the data lifecycle from data collection, processing, storage, transfer and disposal. Provide technical advice to FAO offices on matters relating to data protection compliance and risk management.

Tasks and responsibilities

• Draft new (and update existing) operational guidance and procedures for data protection;
• Support the implementation of the data protection policy by guiding divisions on setting new organisational processes, standards and / or technical controls;
• Respond to requests from data subjects and other data providers submitted in accordance with the Data Protection Policy;
• Respond to internal requests for advice from FAO units and offices related to data protection matters;
• Develop and/or review training and awareness materials to enhance understanding of data protection across FAO;
• Draft updates and reports to the Data Protection Oversight Committee (DPOC), the FAO Advisory Oversight Committee (OAC), Senior Management and FAO’s Governing Bodies on the status of data protection in FAO, as required;
• Represent FAO in meetings with, and collaborate with, counterparts in other UN System agencies to ensure consistency and coordination with UN System policy approaches with respect to data protection and intellectual property (only Consultants);
• Perform any other duties, as required.

Candidates Will Be Assessed Against the Following

• Advanced university degree from an institution recognized by the International Association of Universities (IAU)/UNESCO in relevant discipline such as, but not limited to law, data protection, information management, information systems management, business, information security, computer science, and information technology any other discipline relevant to the work of the Organization. Consultants with bachelor's degree need two additional years of relevant professional experience.
• At least five (5) years of relevant experience in data protection, privacy, information security, data ethics or related discipline.
• Working knowledge of English (C1)
• Limited knowledge of one of Spanish, French, Arabic, Chinese or Russian (for Consultants) is desirable.

FAO Core Competencies

Technical/Functional Skills

• Strong skills in explaining complex technical matters in simple words and formulating guidance and process documents accordingly.
• Work experience in more than one location or area of work.
• Experience in international organisations and the legal framework within which they operate.
• Experience in compliance with data protection frameworks such as ISO 27701, GDPR, or other national or state privacy regulation.
• Experience with managing data providers' requests, concerns, and data breaches.

Selection Criteria

• Data protection certification is desired, such as Certified Information Privacy Professional (CIPP), Certified Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Information Systems Security Professional (CISSP) or other.

Please note that all candidates should adhere to FAO Values of Commitment to FAO, Respect for All and Integrity and Transparency

ADDITIONAL INFORMATION

• FAO does not charge any fee at any stage of the recruitment process (application, interview, processing)
• Please note that FAO will only consider academic credentials or degrees obtained from an educational institution recognized in the IAU/UNESCO list
• Please note that FAO only considers higher educational qualifications obtained from an institution accredited/recognized in the World Higher Education Database (WHED), a list updated by the International Association of Universities (IAU) / United Nations Educational, Scientific and Cultural Organization (UNESCO). The list can be accessed at http://www.whed.net/
• Appointment will be subject to certification that the candidate is medically fit for appointment, accreditation, any residency or visa requirements, and security clearances.