Провідний фахівець із захисту та управління даними

About Mercy Corps

Mercy Corps is a leading global organization powered by the belief that a better world is possible. In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions into action — helping people triumph over adversity and build stronger communities from within. Now, and for the future.

The Program Summary

Mercy Corps' Ukraine response seeks to meet the needs of vulnerable Ukrainians and conflict-affected people where they are: in Ukraine, Poland, and Moldova. Through partnerships with local civil society organizations, we aim to reach 500,000 vulnerable people with multi-purpose cash assistance, resilience programming, agricultural programming, and other humanitarian support, and protection services across the three countries.

Team Summary

The Program Performance and Quality (PaQ) Team works across all Mercy Corps' Ukraine Response programs and many departments to improve and ensure a high quality of delivery. This team consists of a Community Accountability Reporting Mechanisms (CARM) Team, Monitoring, Evaluation, and Learning (MEL) Team, a team of technical advisors, and the Program Standards Team, which this position will be a part of.

The Position

The Data Protection and Management Senior Officer (DPMSO) will work on three dedicated work-streams; 1) ensuring program quality as it pertains to data flows and management in SharePoint and other platforms, 2) verifying and improving data protection across Mercy Corps' Ukraine Response, and 3) supporting teams with Data Protection and Management related issues as needed alongside the relevant regional teams.

The primary function for the DPMSO will be to support the Ukraine Response by providing guidance and support for data protection and management, programming, coordination, and development in conjunction with the local and regional ICT Teams. This includes SharePoint administration and support on related M365 platforms. The DPMSO’s secondary responsibility will cover data protection and management for the entire Ukraine Response. S/he will have oversight of the updating and distribution of effective data storage policies, program filing and archiving systems, standardization, and capacity building and behavior change related to data usage and protection. The DPMSO will work with relevant local, regional, and global teams, such as IT, Program Standards, and the Global M365 Teams, to refine and implement these policies and systems. Finally, the DPMSO will support program, department, and support function teams in understanding and adhering to Data Protection and Management standards.

S/he will be aware of good data management practices and be passionate about data protection and privacy. S/he will have oversight of the Mercy Corps Program Management Minimum Standards (PM@MC) function by working closely with the Program Management Senior Advisor and ICT Team to advise team members on best practices for program management filing and permissions, in line with our program management standards, as well as regulator and donor requirements. The Data Protection and Management Senior Officer will work collaboratively with all team members to support the proper usage and documentation for their work. S/he is highly motivated, an effective communicator, self-driven, and able to move forward complex ideas with limited daily support and direction. S/he is able to work remotely with internal and external stakeholders to achieve common objectives.

Essential Responsibilities

1. Data MANAGEMENT

• Work closely with the leads of each functional area to develop SharePoint structures and tools to adapt to their teams' data needs.
• Manage SharePoint access and permissions — for internal and external users.
• Conduct the semi-annual audit of SharePoint access and monitor the use of sensitive data.
• Write and communicate policies related to data usage and data management in the Ukraine Response.

2. Data Protection

• Ensure compliance with data legislation — including Ukrainian and Moldovan data laws and GDPR.
• Support, with help from the European and Global DPP Teams, Privacy Impact Assessments on various tools, services, and processes within the response.
• Advise on and review Data Sharing and Data Processing agreements for partners, vendors, etc.
• Work with department heads across the response to complete a Record of Processing Activity and associated regular reviews.
• Coordinate with European and Global Data Protection teams on any data incidents.
• Provide oversight of personal and sensitive data usage related to Monitoring, Evaluation, and Learning (MEL), Community Accountability (CARM), CASH Program and other relevant Response activities.
• Facilitate regular training for team members and program partners (refreshers for existing and onboarding for new) on data protection principles and best practices.

3. Risk Management

• Coordinate with ICT, Security and the Senior Advisor for Risk and Ethics managing risk related to sensitive data in the Ukraine Response.
• Monitor and react to regional specific cybersecurity risks and their effects on the operations of the Mercy Corps' Ukraine Response.

4. QUALITY MANAGEMENT

• Provide support to ICT Manager to support the specific data protection and management functions of the Ukraine Response Programs Team.
• Ensure Ukraine Response filing, and documentation practices and procedures follow Mercy Corps', governmental, and donor standards and requirements.
• Provide technical guidance to Program Managers/Directors and Grants Officers to set up effective internal and external program-coordination structures.
• Working with Programs and PaQ Leads to refine processes for program deliverable quality assurance checks, including monitoring, quality assurance/improvement, and spot check procedures.

5. Communication & Coordination

• Liaise (with the assistance of the ICT Manager) with the MC Global M365 team on global priorities, best practices, and Mercy Corps systems administration.
• Liaise (with the assistance of the ICT Manager) with the Mercy Corps Europe and Mercy Corps Global data protection teams as needed.
• Coordinate Microsoft/SharePoint troubleshooting with local and global Mercy Corps IT teams.

Supervisory Responsibility

None. Autonomous role.

Accountability

Reports Directly To: ICT and Information Security Coordinator, Ukraine

Works Directly With: IT Teams, Director of Programs, Program Managers, Grants Officers, MEL and CARM Departments, Finance Director, Operations Director (and associated Managers), Gender and Protection Advisor, Global M365 Teams, and Global Data Protection Teams

Accountability to Participants and Stakeholders

Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.

Minimum Qualification & Transferable Skills

Any skills you have gained through education, volunteering, or life experience that are relevant for the position will be considered. Please explain transferable skills and how they apply to this position in your cover letter or during your interview.

Required Knowledge & Experience

• Bachelor’s degree in a relevant field.
• 5+ previous experience providing IT desk support to a large organization and relevant work.
• 2+ years' experience with Microsoft data storage systems and SharePoint administration.
• Significant experience writing and/or managing data policies and data protection protocols.
• Understanding of GDPR data storage requirements and willing to learn relevance to INGO sector.
• Ability to work across diverse teams and get buy-in from a variety of stakeholders.
• Ability to multi-task and juggle several tasks and relationships at one time.
• Previous experience building staff capacity/training and providing technical guidance.
• Proven ability to work effectively in multi-cultural teams and with technical and administrative staff and consultants.
• Advanced written and spoken English is highly valued, if not already, English courses will be required.

Preferred Skills & Experience

• 5+ years' experience managing Microsoft data storage systems and SharePoint administration.
• Understanding of, or interest in, database, data lake, and data warehouse concepts.
• Working language proficiency in English, Ukrainian, Russian, Romanian, and/or Polish.

Success Factors

The successful Data Protection and Management Officer will have exceptional IT skills and experience, in order to provide technical support across the entire Ukraine Response. S/he will also have proven experience with cross-cultural teams and will possess a high level of adaptability and be able to adjust to the constantly changing working environment. Prioritizing, problem solving, ability to seize opportunities, patience, and attention to detail are essential. The most successful Mercy Corps staff members have a strong commitment to teamwork and accountability, thrive in evolving and changing environments and make effective written and verbal communication a priority in all situations.

Ongoing Learning

In support of our belief that learning organizations are more effective, efficient, and relevant to the communities we serve, we empower all team members to dedicate 5% of their time to learning activities that further their personal and/or professional growth and development. This role will be strongly encouraged to pursue a certificate in the GDPR Data Protection field.

PLEASE, APPLY: https://recruiting2.ultipro.com/MER1024MERCY/JobBoard/7a14d810-d41a-4542-9b9c-ba39a563b91a/OpportunityDetail?opportunityId=e8189f4a-9c25-40d5-b8b2-acb0eabc807b