CRS: Data Analyst – EMEA, WEAF & APAC

JOB DESCRIPTION

Job Title:

Responsible Data Analyst I – EMEA, WEAF & APACReports to: Manager, Responsible DataDepartment: GKIMSalary Grade:9

Job Summary

The Responsible Data Analyst I – EMEA, WEAF & APAC will support the implementation of CRS’s Responsible Data Policy and data protection practices across country programs, departments and business units. This role will focus on ensuring regulatory compliance, embedding privacy principles into operations, and supporting the rollout of privacy management systems such as One Trust. The Analyst will work closely with country teams, regional advisors, and global stakeholders to translate policy into practice, assess and mitigate data protection risks, and build capacity in responsible data stewardship.

Working closely with Manager I, Responsible Data, the Analyst I, will require coordination and communication with all levels of CRS business, MEAL, ICT4D, Global Risk and Compliance, Office Legal Counsel, Legal and programing teams, Strategic Partners, and Vendors to ensure data protection initiatives and operations are in line with agency responsible data values and principles, standards and applicable controls.

The role will cover EMEA (Europe, Middle East and Africa), WEAF (West and East Africa) & APAC (Asia and the Pacific).

Roles and Key Responsibilities

Maintain up-to-date knowledge of relevant data protection regulations and provide contextualized guidance to country programs, departments, and project teams.
Serve as the primary point of contact and advisor for data protection compliance within their zone.
Support the implementation of the agency’s Responsible Data Policy across country programs.
Translate global policy into actionable, context-appropriate practices and workflows that promote privacy, confidentiality, and ethical data use.
Promote and support the adoption of privacy by design and default principles in project life cycles and business processes.
Oversee the identification, documentation, and regular review of personal data processing activities across operations and programs.
Proactively identify and escalate areas of elevated data protection risk, including those related to specific sectors (e.g., health, HR, finance), systems, technologies, projects, or vulnerable groups.
Coordinate the planning, execution, and documentation of Privacy Impact Assessments (PIAs) for new and existing projects, systems, and partnerships.
Collaborate with agreement owners to review contracts, grant agreements, vendor relationships, and data sharing arrangements to ensure data protection clauses are included and compliant.
Support the operationalization of the One Trust Privacy Management platform to automate and track compliance activities such as PIAs, data mapping, and data subject requests.
Lead responsible data training and awareness sessions for program and operations staff.
Build zonal capacity in responsible data stewardship, privacy principles, secure data handling, and compliance expectations.

Basic Qualifications

Bachelor’s degree in data protection, information systems, or a related field
Minimum of 3 years’ experience in data protection, privacy, or compliance roles.
Demonstrated experience supporting data protection programs and ensuring compliance with organizational privacy requirements.
Hands-on experience handling data protection incidents and supporting privacy impact assessments, personal data mapping and data subject rights under privacy regulations.

Preferred Qualifications

Master’s degree in IT computer science, programming, information Systems, or other related field.
Preferably 5 years’ experience in data protection, privacy, or compliance roles.

Experience with data protection and privacy management platforms (e.g., One Trust, Microsoft Purview, or Data Loss Prevention systems).
Experience supporting data protection initiatives in international or humanitarian organizations.

Knowledge, Skills and Abilities

Knowledge of global data protection laws, standards, and associated frameworks (e.g. GDPR, CCPA, HIPAA, and others).
Knowledge of data lifecycle management, including data classification, retention, and destruction practices.
Awareness of techniques…