Data Protection Support - Data Protection and Privacy Team - US Remote

Description

Location: United States, Remote

Position Status: Full-time, Exempt, Regular

Salary Level: US Starting Salary for this role will be USD $55,600 to $66,025 commensurate on experience.

Valid unrestricted work authorization in the United States is required at the time of application for this position.

About Mercy Corps

Mercy Corps is a leading global organization powered by the belief that a better world is possible. In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions into action — helping people triumph over adversity and build stronger communities from within.

To do this, we know our teams do their best work when they are diverse, and every team member feels that they belong. We welcome diverse backgrounds, perspectives, and skills so that we can be stronger and have long term impact.

About the Data Protection & Privacy Team

We are a proactive and forward-thinking unit who is taking humanitarian data protection and privacy to the next level of maturity and scalability. Data protection is people protection, and the mission of the Data Protection and Privacy team (DPP) is to build capacity for implementing responsible data practices throughout Mercy Corps in support of our commitments to safeguarding, protecting, and “doing no harm”. We provide policies, tools, and training to Mercy Corps staff so that they can manage risks to data that the organization is entrusted with and build trust with program participants, the communities in which Mercy Corps works, partners, and donors.

Examples of our current projects include Mercy Corps’ Responsible Data Toolkit and the Data Protection and Privacy Guides.

DPP Core Values

• Diversity: DPP is composed of individuals with a range of lived and professional experience, which makes us better suited to working in a global context where differences in culture, regulatory environments, and priorities mean embracing difference while working towards common goals. We welcome applications from LGBTQIA+, BIPOC, and female identifying candidates as well as those who come from, or are located in, the countries in which Mercy Corps works.
• Commitment to safeguarding and the humanitarian principle of doing no harm.
• Ethical use of personal data that is collected, managed, or shared in the course of our work.
• Adaptability: we are committed to balancing the various needs of regional and country staff to improve data protection and privacy. We are committed to Mercy Corps’ localization agenda and make every effort to create practical, accessible, material to support our goals.
• Innovation and working with change-makers to test, co-create, and scale more effective responsible data solutions in an era of exponentially growing technology.

The Position

The Data Protection Support will contribute to the operational success of the Global Data Protection and Privacy team of Mercy Corps and ensure that the team can support the responsible use of data in 40+ global locations.

Essential Responsibilities

This is an analytical role that will respond to requests from a range of global teams and analyze those requests to ensure compliance and continued improvement related to Mercy Corps’ responsible data policy. This person will:

• Independently manage and prioritize incoming requests for support with data protection and privacy issues.
• Perform privacy impact assessments; initiate, maintain, and audit records for data systems; and help respond to requests from data subjects. Courteous and prompt response to requests for help is essential.
• Support innovative process improvements to streamline our work.
• Craft and send written communications on behalf of the Data Protection and Privacy team, through email, internal platforms, and regular reports.
• Lead or co-lead regional working group meetings, trainings, and other calls with Data Protection and Privacy team.
• Create or co-create responsible data program materials, documentation, and templates.
• Create and/or assist with quarterly reports using Excel and/or Power BI.
• Analyze Data Protection and Privacy needs of the organization, particularly at the regional level, and identify opportunities for improvement.
• Collaborate on Data Protection and Privacy strategy and future planning efforts.
• Regional support for incident/breach management with data protection or privacy implications.
• Additional duties as assigned.

Supervisory Responsibility

The Data Protection Support role has no supervisory responsibilities.

Accountability

Reports Directly To: Global Privacy Program Manager

Works Directly With: Global Data Protection and Privacy team including Europe DPO/ Head of Operations & Data Protection, Europe, plus team members and program stakeholders across the agency. Priority stakeholders include, Legal, Compliance, and Programs (PaQ, MEL, RPT)

Accountability to Participants and Stakeholders

Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.

Minimum Qualification & Transferable Skills

• Bachelor's degree or 3+ years of experience working with data protection and privacy, compliance, or data management. This can be inclusive of Help Desk Management or a similar type of administrative support.
• Proven experience using MS Office (Word, PowerPoint, Excel, Outlook) and Google Suites.
• Fluency in English is required.
• Fluency in Spanish is strongly preferred, followed by Arabic or other languages spoken in countries where Mercy Corps operates.
• Proven ability to initiate, maintain, and audit records.
• Strong analytical thinking and problem-solving skills.
• Ability to deliver a high level of support.
• High level of attention to detail, excellent time management, and prioritization skills.
• Demonstrated ability to effectively manage complex, multi-step projects and procedures consistently.
• Demonstrated ability to work as a member of a remote team: especially by showcasing effective organizational skills and proficiency in both written and verbal communication.
• Ability to collaborate and foster positive relationships.
• Flexible approach, seamlessly shifting between tasks, and delivering effective support.
• Ability to exercise sound judgment and maintain a composed attitude during challenging situations.
• Familiarity with the various data protection and privacy regulations that govern Mercy Corps’ work, such as the EU General Data Protection Regulation; the California Consumer Privacy Act, HIPPA, preferred.
• Familiarity with ticketing systems such as Jira and/or data protection platforms such as OneTrust is strongly preferred.
• Familiarity with any laws or regulations governing personal data (e.g. HIPPA, CCPA, GDPR) is strongly preferred.
• IAPP certification or similar is strongly preferred.
• Familiarity with digital security, data protection and privacy, or working with data management is preferred.
• Experience working in a diverse global organization.
• Experience with international development is preferred

Success Factors

This is a growth position, and we are committed to investing in someone who can continue to contribute to humanitarian data protection over the long-term. Our work spans the domains of technology, legal, compliance, and training: everybody on the team contributes something unique. We are looking for self-motivated people who prioritize collaboration and who are willing to take on new challenges. You may not have expertise in every area indicated, but you are willing to learn, can make a clear case for how your experience is a good fit, and are able to provide examples of successfully taking on new challenges.

Living Conditions / Environmental Conditions

The position is 100% remote, within the United States, and does not need to be based near a Mercy Corps office. The position will be supporting global stakeholders and will often require work outside of a traditional schedule to accommodate time zone differences. Regular business hours will be established for the role depending on location, though early morning or evening calls should be expected. This position might require approximately 5% of annual time for travel.

Ongoing Learning

In support of our belief that learning organizations are more effective, efficient and relevant to the communities we serve, we empower all team members to dedicate 5% of their time to learning activities that further their personal and/or professional growth and development. You will have the opportunity to gain accreditation and experience in data protection and privacy.

Diversity, Equity & Inclusion

Achieving our mission begins with how we build our team and work together. Through our commitment to enriching our organization with people of different origins, beliefs, backgrounds, and ways of thinking, we are better able to leverage the collective power of our teams and solve the world’s most complex challenges. We strive for a culture of trust and respect, where everyone contributes their perspectives and authentic selves, reaches their potential as individuals and teams, and collaborates to do the best work of their lives.

We recognize that diversity and inclusion is a journey, and we are committed to learning, listening and evolving to become more diverse, equitable and inclusive than we are today.

Equal Employment Opportunity

Mercy Corps is an equal opportunity employer that does not tolerate discrimination on any basis. We actively seek out diverse backgrounds, perspectives, and skills so that we can be collectively stronger and have sustained global impact.

We are committed to providing an environment of respect and psychological safety where equal employment opportunities are available to all. We do not engage in or tolerate discrimination on the basis of race, color, gender identity, gender expression, religion, age, sexual orientation, national or ethnic origin, disability (including HIV/AIDS status), marital status, military veteran status or any other protected group in the locations where we work.

Safeguarding & Ethics

Mercy Corps is committed to ensuring that all individuals we come into contact with through our work, whether team members, community members, program participants or others, are treated with respect and dignity. We are committed to the core principles regarding prevention of sexual exploitation and abuse laid out by the UN Secretary General and IASC. We will not tolerate child abuse, sexual exploitation, abuse, or harassment by or of our team members. As part of our commitment to a safe and inclusive work environment, team members are expected to conduct themselves in a professional manner, respect local laws and customs, and to adhere to Mercy Corps Code of Conduct Policies and values at all times. Team members are required to complete mandatory Code of Conduct e-learning courses upon hire and on an annual basis.

As a safeguarding measure, Mercy Corps screens all potential US-Based employees. This is done following the conclusion of recruitment and prior to assuming full employment.

Our screening process is designed to be transparent and completed in partnership with new Team Members. You will have the opportunity to disclose any prior convictions at the conclusion of the recruitment process before the check is initiated. We ask that you do not disclose any prior convictions in your application materials or during the recruitment process.

Covid-19 Vaccine Policy for US-Based Employees

Mercy Corps has determined that, in an effort to protect the health, safety, and well-being of all Mercy Corps employees working in the United States, all U.S.-based employees must be fully vaccinated for COVID-19, regardless of prior COVID-19 infection status. This policy is necessary to ensure not only the safety of our workforce, but the ongoing functionality of the organization.

This policy will be revised as needed to comply with federal, state, and local requirements, and to respond to changing guidance from public health authorities. For new employees this requirement goes into effect within 10 business days of employment.  Team members that travel are expected to comply with host-country requirements, including vaccinations.  Failure to comply may impact your employment.  Proof of vaccination or exemption must be provided.

Keywords

Data ProtectionPrivacyComplianceData ManagementMS OfficeGoogle SuitesEnglishSpanishAnalytical ThinkingProblem-SolvingSupportTime ManagementCommunicationData Protection RegulationsDigital SecurityInternational Development