DATA PROTECTION OFFICER

Apex Rankers; Islamabad; On-site; PKR 2,790,000 - 4,241,000; Full time

Job summary

Pakistan Digital Authority (PDA) seeks a Data Protection Officer (Principal Officer, PPS-08/09) to lead regulatory privacy compliance across federal digital platforms. The role covers DPIAs, data subject rights management, and breach response, reporting to the Data Governance & Privacy Directorate.

The ideal candidate will have 6–8 years of privacy law experience, knowledge of PDPA, GDPR, and ISO standards, and will drive privacy awareness and policy development across PDA’s units.

Qualifications

• LLB/LLM/Master/MS in Data Privacy, Law, Information Security, Public Policy from HEI
• 6–8 years privacy law compliance experience (PDPA/GDPR) and DPIA
• Experience with data governance, data classification, breach notification

Responsibilities

• Enforce compliance with PDPA, GDPR and ISO 27701 across federal platforms
• Conduct Data Protection Impact Assessments (DPIA) for new systems
• Manage data subject rights requests and breach notification processes
• Draft and update data governance policies and cross-border transfer agreements
• Deliver privacy training to developers and government stakeholders

Skills

Data privacy laws

DPIA

Privacy by design

Breach notification

Information security standards

Education

LLB / LLM / Master / MS in Data Privacy, Law, Information Security, Public Policy

Tools

GDPR

ISO 27001

ISO 27701

NIST

Job description

# DATA PROTECTION OFFICERActive PrepPrincipal Officer Grade / PPS-08/09PDA-J0165PID(I) 3116/26Official recruitment notification, eligibility criteria, pay scale (Principal Officer Grade / PPS-08/09), quota allocation, and written screening test syllabus for **DATA PROTECTION OFFICER** in the **Data Governance & Privacy Directorate, Pakistan Digital Authority (PDA)**.### Job Specifications & Posting DetailsCase Number**PDA-J0165**Pay Scale / BPS**Principal Officer Grade / PPS-08/09**Department / Ministry**Data Governance & Privacy Directorate, Pakistan Digital Authority (PDA)**Total Positions**1 Post**Job Type / Status**Regular / Contractual**Place of Posting**4th Floor, 5-A Constitution Avenue, Islamabad**Age Limit**28 - 45 years**Gender Eligibility**Male / Female** Estimated Base Salary Package**PKR 250,000 - 380,000 / month (Principal Scale Equivalent)** Credential Category**Llm / Ms In Data Privacy & Information Governance** Experience Required**72 Months** Street & Office Address**4th Floor, 5-A Constitution Avenue, Sector F-5/1** Province / Region**Federal Capital** Postal Code**44000**Posting Date**October 06, 2026**Apply Before**October 21, 2026** Domicile & Regional Quota AllocationOpen Merit (All Pakistan)### Minimum Qualifications & ExperienceEducational QualificationLLB / LLM / Master / MS in Data Privacy, Law, Information Security, Computer Science, or Public Policy from an HEC recognized institution.Prescribed Experience & Eligibility CriteriaMinimum 6 to 8 years experience in privacy law compliance (Personal Data Protection Act / GDPR / ISO 27701), Data Protection Impact Assessments (DPIA), data classification, and breach notification.### Job Description & Position OverviewOfficial employment notification has been announced for the executive appointment of DATA PROTECTION OFFICER on Principal Officer Grade / PPS-08/09 at Data Governance & Privacy Directorate, Pakistan Digital Authority (PDA). This statutory governance post carries 1 Post allocated on Open Merit to serve as the chief custodian of data privacy, citizen rights, and regulatory compliance across federal digital platforms.The primary operational scope of DATA PROTECTION OFFICER entails auditing government and commercial data processing pipelines, conducting Data Protection Impact Assessments (DPIA), enforcing compliance with the Personal Data Protection Act and international privacy frameworks, managing cross-border data transfer policies, and directing data breach investigation protocols.The candidate selection pathway entails comprehensive verification of legal and data governance credentials, followed by a 100-mark written screening test covering privacy laws, data protection architecture, and regulatory drafting, concluding with a selection board interview.### Key Responsibilities & Professional Duties* ✓Privacy Regulatory Compliance: Enforce organizational and nationwide compliance with Pakistan's Personal Data Protection framework, GDPR, and ISO/IEC 27701 standards.* ✓Data Protection Impact Assessments (DPIA): Conduct comprehensive DPIAs on new digital systems, cloud architectures, and citizen service delivery platforms.* ✓Citizen Privacy Rights Management: Manage protocols for processing data subject requests (access, rectification, erasure, data portability) under statutory timelines.* ✓Data Breach Notification Oversight: Lead incident response for data leak incidents, coordinating root-cause analyses and notifying statutory oversight bodies.* ✓Data Governance Policy Formulation: Draft and update enterprise data classification policies, retention schedules, and cross-border transfer agreements.* ✓Privacy Awareness & Training: Deliver privacy engineering training and data ethics workshops to software developers and government department stakeholders.### Required Skills & Domain Competencies* Data Privacy Legislation (Personal Data Protection Act, GDPR)* Data Protection Impact Assessments (DPIA)* Privacy by Design & Data Lifecycle Governance* Regulatory Breach Notification Protocols & Auditing* Information Security Standards (ISO 27001, ISO 27701, NIST)* Legal Regulatory Drafting & Data Subject Rights Management