Data Protection Officer

Pakistan Single Window (PSW); Karachi Division; On-site; PKR 2,000,000 - 3,000,000; Full time

Benefits offered by this job

Competitive salary

Fuel Card

Health benefits

Professional development opportunities

Inclusive work culture & much more

Job summary

Pakistan Single Window (PSW) is seeking a seasoned Data Privacy Officer to lead our privacy program in Karachi. You will ensure compliance with data protection laws, drive privacy impact assessments for new projects, and align privacy strategies with broader information security goals.

The role requires cross-functional collaboration, policy development, and ongoing staff training. The successful candidate will oversee data classification, monitor evolving regulations, and manage data subject

Qualifications

• Knowledge of data protection frameworks and best practices.
• Ability to assess privacy impact and classify data by sensitivity.
• Understanding of Data Privacy strategy aligned with Information Security goals.
• Strong analytical, communication, collaboration and leadership skills.
• Bachelor's degree in technology/engineering or information security.
• 6–7 years of hands-on data and information security experience.

Responsibilities

• Ensure adherence to data protection laws and regulations.
• Monitor privacy law changes and update policies accordingly.
• Review Data Privacy policies to stay compliant with updates.
• Develop and implement Data Privacy within the Information Security program.
• Conduct privacy impact assessments for new projects.
• Identify data types, purposes, and sensitivity; apply protections.
• Handle data subject access requests and inquiries.
• Train employees on data protection practices.
• Collaborate across departments to foster compliance culture.
• Support third-party risk management in data handling controls.
• Carry out duties assigned by the Head of Information Security.

Skills

Data protection frameworks

Privacy impact assessments

Data classification

Information security

Leadership

Communication

Documentation

Education

Bachelor's degree in technology/engineering/information security

Job description

• Guarantee organizational adherence to relevant data protection laws and regulations


• Monitor changes in privacy laws and promptly update policies and procedures to align with the evolving legal landscape


• Prepare and regularly review Data Privacy policies and procedures to ensure compliance with legal, regulatory, and organizational updates


• Assist in the development and implementation of the Data Privacy strategy, integrating it into the broader Information Security strategy of the organization


• Conduct privacy impact assessments for new projects, processes, or technologies involving personal data


• Identify and document the types of personal data processed, establish the purposes of processing, and classify data based on sensitivity. Implement appropriate protection measures accordingly


• Manage and respond to data subject access requests and inquiries related to privacy concerns


• Provide training to employees on data protection practices and foster privacy awareness within the organization


• Collaborate with other departments to ensure a holistic approach to data protection, fostering a culture of compliance throughout the organization


• Support reporting authorities in implementing procedural control measures identified through audits, risk assessments, compliance reviews, etc


• As the go-to person for data protection, the DPO ensures that data management policies align with security and compliance requirements


• Oversee the development, implementation, and enforcement of information/data classification policies, ensuring comprehensive coverage in SOP/Baseline documents


• Perform internal privacy audits and assessments to identify gaps and areas for improvement. Recommend and implement corrective actions as needed


• Work with Procurement and Third-Party Risk Management teams to ensure adequacy of assessment, evaluation, and monitoring of third-party vendors that handling personal data, in terms of their data handling practices, security and contracts, to ensure they comply with privacy and data protection requirements


• Undertake any other related duty assigned by the HOD Information Security.

Requirements

• Knowledge and understanding of common data protection management frameworks & best practices


• Ability to assess privacy impact, classify data, and establish protective measures based on sensitivity


• Comprehensive understanding of Data Privacy strategy and its alignment with broader Information Security goals


• Strong analytical, communication, collaboration, problem-solving, documentation and leadership Skills to convey complex data protection concepts to diverse audiences, both internal and external


• Bachelor's degree in a technology/engineering/information security related field required


• Minimum 6 to 7 years of hands-on experience in Data & information security in a large enterprise environment.

Benefits

• Competitive salary


• Fuel Card


• Health benefits


• Professional development opportunities


• Inclusive work culture & much more