The Port Authority of Jamaica wishes to recruit a DATA PROTECTION OFFICER in the President’s Office.

SALARY SCALE: $6,641,033.65 - $7,609,552.15 per annum.

JOB SUMMARY:

This position independently monitors compliance with the Data Protection Act (DPA), data protection standards, and best practices. Responsibilities include overseeing the development and continuous monitoring of the PAJ’s data protection and privacy program to ensure adherence to regulatory requirements and industry standards.

QUALIFICATIONS & EXPERIENCE:

• Bachelor’s degree in Law, Computer Science, Risk Management, Audit or related field.
• Professional certification in data protection or privacy (e.g. CIPM, CIPP/E, CIPT, CDPSE, CDP).
• Minimum 3 years’ experience in data protection or privacy, law, information security, compliance, risk management, audit or a similar role.

 DUTIES & RESPONSIBILITIES:

• Monitor and ensure that each data controller processes personal data in compliance with the DPA and any other relevant privacy laws and regulations.
• Advise management on the allocation of internal responsibilities to support ongoing compliance with the DPA.
• Ensure that any violation of data protection standards or provisions of the Data Protection Act (DPA) by the data controller is addressed in compliance with the DPA.
• Contribute to the development, implementation and maintenance of data protection policies and procedures.
• Ensure that all documentation required to demonstrate compliance with the Data Protection Act (DPA), including policies, procedures, registration details, and data protection impact assessments, is regularly updated and maintained.
• Conduct or assist in data processing audits and privacy impact assessments, providing recommendations to enhance data protection practices as needed.
• Track the implementation of recommended actions.
• Prepare and present reports to Senior Executive Management, and to the respective Boards through their Corporate Governance Committees.
• Serve as the primary point of contact for the Office of the Information Commissioner (OIC) and provide consultation on matters related to personal data processing.
• Establish mechanisms to receive and manage requests to exercise rights of the data subjects.
• Assist data subjects in the exercise of their rights under the DPA.
• Assess requests by data subjects in exercising their rights.
• Work collaboratively to maintain a data security incident management plan, ensuring prompt response to incidents, including security breaches, and implementing procedures for notifying the Office of the Information Commissioner (OIC) and affected data subjects.
• Develop and implement a data protection and privacy training program tailored to employees' roles, ensuring awareness and compliance across all levels.
• Ensure data protection measures are embedded by design and by default, prioritizing the rights and freedoms of data subjects.
• Assess the hiring of data processors, including assessing the content of the contracts or legal documents that regulate the data controller – data processor relationship.
• Identify international data transfer instruments that are suited to the needs and characteristics of the organisation and the reasons that justify the transfer.
• Monitor changes to local data protection and privacy laws and make recommendations where necessary.
• Any other duties assigned. 

If this opportunity interests you, and you meet all the above requirements, please submit your applications by 2025 April 14.

We thank all applicants for their interest; however, only those candidates selected for interviews will be contacted.