Data Protection Officer

Pakistan Single Window; Karachi Division; On-site; PKR 1,800,000 - 3,500,000; Full time

Benefits offered by this job

Competitive salary

Fuel Card

Health benefits

Professional development opportunities

Inclusive work culture

Job summary

Pakistan Single Window is seeking a DPO to safeguard data privacy across the organization. The role involves ensuring compliance with evolving data protection laws, developing and updating privacy policies, and integrating privacy strategies with the broader Information Security framework.

You will conduct privacy impact assessments and guide data classification to implement robust protections. The position requires strong analytical and leadership skills, with 6–7 years of hands-on data and

Qualifications

• Bachelor’s degree in a technology/engineering/information security related field.
• 6–7 years of hands‑on experience in Data & information security in a large enterprise environment.
• Knowledge of data protection management frameworks & best practices.
• Ability to assess privacy impact, classify data, and establish protective measures based on sensitivity.

Responsibilities

• Guarantee organizational adherence to data protection laws and regulations.
• Monitor changes in privacy laws and update policies accordingly.
• Prepare and review Data Privacy policies to ensure compliance.
• Assist in developing and implementing Data Privacy strategy within Information Security.
• Conduct privacy impact assessments for new projects involving personal data.
• Classify types of personal data and implement appropriate protection measures.

Skills

Data protection

Privacy impact

Policy development

Risk management

Audits

Leadership

Education

Bachelor’s degree in technology/engineering/information security

Job description

• Guarantee organizational adherence to relevant data protection laws and regulations.
• Monitor changes in privacy laws and promptly update policies and procedures to align with the evolving legal landscape.
• Prepare and regularly review Data Privacy policies and procedures to ensure compliance with legal, regulatory, and organizational updates.
• Assist in the development and implementation of the Data Privacy strategy, integrating it into the broader Information Security strategy of the organization.
• Conduct privacy impact assessments for new projects, processes, or technologies involving personal data.
• Identify and document the types of personal data processed, establish the purposes of processing, and classify data based on sensitivity. Implement appropriate protection measures accordingly.
• Manage and respond to data subject access requests and inquiries related to privacy concerns.
• Provide training to employees on data protection practices and foster privacy awareness within the organization.
• Collaborate with other departments to ensure a holistic approach to data protection, fostering a culture of compliance throughout the organization.
• Support reporting authorities in implementing procedural control measures identified through audits, risk assessments, compliance reviews, etc.
• As the go-to person for data protection, the DPO ensures that data management policies align with security and compliance requirements.
• Oversee the development, implementation, and enforcement of information/data classification policies, ensuring comprehensive coverage in SOP/Baseline documents.
• Perform internal privacy audits and assessments to identify gaps and areas for improvement. Recommend and implement corrective actions as needed.
• Work with Procurement and Third-Party Risk Management teams to ensure adequacy of assessment, evaluation, and monitoring of third-party vendors that handling personal data, in terms of their data handling practices, security and contracts, to ensure they comply with privacy and data protection requirements.
• Undertake any other related duty assigned by the HOD Information Security.

• Knowledge and understanding of common data protection management frameworks & best practices.
• Ability to assess privacy impact, classify data, and establish protective measures based on sensitivity.
• Comprehensive understanding of Data Privacy strategy and its alignment with broader Information Security goals.
• Strong analytical, communication, collaboration, problem-solving, documentation and leadership Skills to convey complex data protection concepts to diverse audiences, both internal and external.
• Bachelor’s degree in a technology/engineering/information security related field required.
• Minimum 6 to 7 years of hands‑on experience in Data & information security in a large enterprise environment.

• Competitive salary
• Fuel Card
• Health benefits
• Professional development opportunities
• Inclusive work culture & much more