Data Privacy Risk Officer - STAAI PO

Work for the IMF. Work for the World. The International Monetary Fund (IMF) is an organization of 191 member countries, working to foster global monetary cooperation, secure financial stability, facilitate international trade, promote high employment and sustainable economic growth, and reduce global poverty.

The
** Data Privacy Risk Officer
** reports to the Chief Data Privacy Officer in IMF’s Data Privacy Office (DPO) and supports day-to-day privacy operations, with primary responsibility for ROPA and privacy notice management, privacy platform administration, and translating privacy requirements into practical guidance through training, metrics, and reporting. S/he will work closely with all Fund departments, and in addition to the below, will support the Chief Data Privacy Officer on strategic initiatives, as needed.
** About the Data Privacy Office (DPO):
** The Fund’s DPO is an independent, second-line risk function, mandated to oversee the protection and responsible use of personal data across the IMF. Its core mission is to promote a culture of privacy awareness, ensure institutional compliance with internal privacy rules, and manage privacy risks.
** Main Duties and Responsibilities
**** DPO Operations and Compliance Management
*** Develop, maintain and update the organization’s
** Records of Processing Activities** (ROPAs), ensuring the organization’s ROPA library is accurate, complete, and aligned with applicable internal requirements.
* Manage the
** privacy notice lifecycle**, including drafting, reviewing, updating, publishing, and archiving all privacy notices.
* Support operational processes related to
** data subject rights
** requests (e.g., access, correction), including intake tracking, coordination with stakeholders, and metrics.
* Respond to routine privacy related inquiries from staff and escalate issues as needed.
** Change Management, Training, and Outreach
*** Support
** privacy-related change management
** by developing, maintaining and delivering practical training, awareness, and outreach materials that promote privacy awareness and privacy by design across the organization.
* Measure the effectiveness of change management and training initiatives through
** defined metrics and feedback mechanisms**.
* ** M
* *** anage and evolve the Data Privacy Champions Network**, including onboarding, enablement, coordination, and ongoing engagement of privacy champions across the organization
** eGRC Platform Administration
*** Maintain and administer the DPO’s privacy management platform (e.g., ROPA, risk assessments and registries, issues, and actions).
* Ensure data quality, appropriate user access, and effective reporting functionality.
** Reporting, Metrics, and Dashboards
*** Develop and maintain privacy reports, dashboards, and metrics for management, governance bodies, and audit purposes, including tracking key indicators related to compliance, operational maturity, and training uptake.
** Minimum Qualifications
*** Educational development, typically acquired through the completion of an advanced university degree in risk management, IT, or related field study; or a bachelor’s degree in risk management, IT, or related field study supplemented by a minimum of six years of relevant professional experience is required. Alternatively, a minimum of two years of experience in a related position at Grade A8, or equivalent, is required.
** In addition, the ideal candidate will possess the following:
*** Practical experience with ROPA management, privacy notices, and governance or compliance tools (e.g., GRC/eGRC platforms, One Trust, etc.).
* Experience developing content for privacy training or awareness materials and supporting organizational change initiatives.
* Solid knowledge of privacy laws, regulations, and industry best practices, with the ability to apply them in the context of international organizations.
* At least one professional certification in data privacy preferred (e.g., IAPP certifications such as CIPP/E, CIPM, CIPP/US, AIGP, or equivalent).
* Strong analytical and quantitative skills, including development and interpretation of metrics, dashboards, and analyses using Power BI,…