The incumbent will be responsible for ensuring that the organization complies with the Data Protection Act of Jamaica and protects the privacy rights of its customers, employees, and other stakeholders.

The Stewart's Automotive Group is seeking a competent and experienced individual to fill the position of:

DATA PROTECTION OFFICER (DPO)

POSITION SUMMARY:  The incumbent will be responsible for ensuring that the organization complies with the Data Protection Act of Jamaica and protects the privacy rights of its customers, employees, and other stakeholders. The DPO oversees the implementation of data protection policies and procedures, conducts data protection impact assessments, provides advice and guidance on data protection issues, and liaises with the Information Commissioner's Office (ICO) and other relevant authorities.

Primary Duties of the position:

• Develop and maintain a data protection framework that aligns with the Data Protection Act of Jamaica and other applicable laws and regulations.
• Monitor and audit the organization's data processing activities and ensure that they adhere to the data protection principles and standards.
• Provide training and awareness programs on data protection and privacy to all staff and stakeholders.
• Conduct data protection impact assessments (DPIAs) for new or existing projects, systems, or processes that involve personal data.
• Advise and consult with the management and staff on data protection matters, such as data subject rights, data breaches, data sharing, consent, and contracts.
• Act as the main point of contact for the ICO and other regulatory bodies and handle any data protection inquiries, complaints, or investigations.
• Report and document any data protection incidents or breaches and implement corrective and preventive measures.
• Keep abreast of the latest developments and best practices in data protection and privacy.
• Any other compliance duties sanctioned by the Data Protection Act

Qualififications, Experience and Competencies required

• A Bachelor's degree in law, information technology, or a related field.
• A certification or training in data protection or privacy, such as CIPP, CIPM, CIPT, or CDPO.
• At least three years of experience working in data protection, privacy, or compliance roles.
• Excellent knowledge of the Data Protection Act of Jamaica and other relevant laws and regulations.
• Strong analytical and problem-solving skills and the ability to conduct DPIAs and risk assessments.
• Effective communication and interpersonal skills and the ability to communicate complex data protection issues to different audiences.
• High ethical standards and integrity and the ability to maintain confidentiality and impartiality.