Провідний фахівець/ провідна фахівчиня із захисту та управління даними
ЗАВЕРШЕНО
About Mercy Corps
Mercy Corps is a leading global organization powered by the belief that a better world is possible. In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions into action — helping people triumph over adversity and build stronger communities from within. Now, and for the future.
The Program Summary
Mercy Corps’ Ukraine response seeks to meet the needs of vulnerable Ukrainians and affected people where they are: in Ukraine, Poland, and Moldova. Through partnerships with local civil society organizations, we aim to reach 500,000 vulnerable people with multi-purpose cash assistance, resilience programming, agricultural programming, and other humanitarian support, and protection services across the three countries.
Team Summary
The Program Performance and Quality (PaQ) Team works across all Mercy Corps’ Ukraine Response programs and many departments to improve and ensure a high quality of delivery. This team consists of a Community Accountability Reporting Mechanisms (CARM) Team, Monitoring, Evaluation, and Learning (MEL) Team, a team of technical advisors, and the Program Standards Team, which this position will be a part of.
The Position
The Data Protection and Management Senior Officer (DPMSO) will work on three dedicated work-streams; 1) ensuring program quality as it pertains to data flows and management in SharePoint and other platforms, 2) verifying and improving data protection across Mercy Corps’ Ukraine Response, and 3) supporting teams with Data Protection and Management related issues as needed alongside the relevant regional teams.
The primary function for the DPMSO will be to support the Ukraine Response by providing guidance and support for data protection and management, programming, coordination, and development in conjunction with the local and regional ICT Teams. This includes SharePoint administration and support on related M365 platforms. The DPMSO’s secondary responsibility will cover data protection and management for the entire Ukraine Response. S/he will have oversight of the updating and distribution of effective data storage policies, program filing and archiving systems, standardization, and capacity building and behavior change related to data usage and protection. The DPMSO will work with relevant local, regional, and global teams, such as IT, Program Standards, and the Global M365 Teams, to refine and implement these policies and systems. Finally, the DPMSO will support program, department, and support function teams in understanding and adhering to Data Protection and Management standards.
S/he will be aware of good data management practices and be passionate about data protection and privacy. S/he will have oversight of the Mercy Corps Program Management Minimum Standards (PM@MC) function by working closely with the Program Management Senior Advisor and ICT Team to advise team members on best practices for program management filing and permissions, in line with our program management standards, as well as regulator and donor requirements. The Data Protection and Management Senior Officer will work collaboratively with all team members to support the proper usage and documentation for their work. S/he is highly motivated, an effective communicator, self-driven, and able to move forward complex ideas with limited daily support and direction. S/he is able to work remotely with internal and external stakeholders to achieve common objectives.
Essential Responsibilities
1. Data MANAGEMENT
- Work closely with the leads of each functional area to develop SharePoint structures and tools to adapt to their teams’ data needs.
- Manage SharePoint access and permissions – for internal and external users.
- Conduct the semi-annual audit of SharePoint access and monitor the use of sensitive data.
- Write and communicate policies related to data usage and data management in the Ukraine Response.
2. Data Protection
- Ensure compliance with data legislation – including Ukrainian and Moldovan data laws and GDPR.
- Support, with help from the European and Global DPP Teams, Privacy Impact Assessments on various tools, services, and processes within the response.
- Advise on and review Data Sharing and Data Processing agreements for partners, vendors, etc.
- Work with department heads across the response to complete a Record of Processing Activity and associated regular reviews.
- Coordinate with European and Global Data Protection teams on any data incidents.
- Provide oversight of personal and sensitive data usage related to Monitoring, Evaluation, and Learning (MEL), Community Accountability (CARM), CASH Program and other relevant Response activities.
- Facilitate regular training for team members and program partners (refreshers for existing and onboarding for new) on data protection principles and best practices.
3. Risk Management
- Coordinate with ICT, Security and the Senior Advisor for Risk and Ethics managing risk related to sensitive data in the Ukraine Response.
- Monitor and react to regional specific cybersecurity risks and their effects on the operations of the Mercy Corps’ Ukraine Response.
4. QUALITY MANAGEMENT
- Provide support to ICT Manager to support the specific data protection and management functions of the Ukraine Response Programs Team.
- Ensure Ukraine Response filing, and documentation practices and procedures follow Mercy Corps’, governmental, and donor standards and requirements.
- Provide technical guidance to Program Managers/Directors and Grants Officers to set up effective internal and external program-coordination structures.
- Working with Programs and PaQ Leads to refine processes for program deliverable quality assurance checks, including monitoring, quality assurance/improvement, and spot check procedures.
5. Communication & Coordination
- Liaise (with the assistance of the ICT Manager) with the MC Global M365 team on global priorities, best practices, and Mercy Corps systems administration.
- Liaise (with the assistance of the ICT Manager) with the Mercy Corps Europe and Mercy Corps Global data protection teams as needed.
- Coordinate Microsoft/SharePoint troubleshooting with local and global Mercy Corps IT teams.
Supervisory Responsibility
None. Autonomous role.
Accountability
Reports Directly To: ICT and Information Security Coordinator, Ukraine
Works Directly With: IT Teams, Director of Programs, Program Managers, Grants Officers, MEL and CARM Departments, Finance Director, Operations Director (and associated Managers), Gender and Protection Advisor, Global M365 Teams, and Global Data Protection Teams
Accountability to Participants and Stakeholders
Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.
Minimum Qualification & Transferable Skills
Any skills you have gained through education, volunteering, or life experience that are relevant for the position will be considered. Please explain transferable skills and how they apply to this position in your cover letter or during your interview.
Required Knowledge & Experience
- Bachelor’s degree in a relevant field.
- 5+ previous experience providing IT desk support to a large organization and relevant work.
- 2+ years’ experience with Microsoft data storage systems and SharePoint administration.
- Significant experience writing and/or managing data policies and data protection protocols.
- Understanding of GDPR data storage requirements and willing to learn relevance to INGO sector.
- Ability to work across diverse teams and get buy-in from a variety of stakeholders.
- Ability to multi-task and juggle several tasks and relationships at one time.
- Previous experience building staff capacity/training and providing technical guidance.
- Proven ability to work effectively in multi-cultural teams and with technical and administrative staff and consultants.
- Advanced written and spoken English is highly valued, if not already, English courses will be required.
Preferred Skills & Experience
- 5+ years’ experience managing Microsoft data storage systems and SharePoint administration.
- Understanding of, or interest in, database, data lake, and data warehouse concepts.
- Working language proficiency in English, Ukrainian, Russian, Romanian, and/or Polish.
Success Factors
The successful Data Protection and Management Officer will have exceptional IT skills and experience, in order to provide technical support across the entire Ukraine Response. S/he will also have proven experience with cross-cultural teams and will possess a high level of adaptability and be able to adjust to the constantly changing working environment. Prioritizing, problem solving, ability to seize opportunities, patience, and attention to detail are essential. The most successful Mercy Corps staff members have a strong commitment to teamwork and accountability, thrive in evolving and changing environments and make effective written and verbal communication a priority in all situations.
Ongoing Learning
In support of our belief that learning organizations are more effective, efficient, and relevant to the communities we serve, we empower all team members to dedicate 5% of their time to learning activities that further their personal and/or professional growth and development. This role will be strongly encouraged to pursue a certificate in the GDPR Data Protection field.
Diversity, Equity & Inclusion
Achieving our mission begins with how we build our team and work together. Through our commitment to enriching our organization with people of different origins, beliefs, backgrounds, and ways of thinking, we are better able to leverage the collective power of our teams and solve the world’s most complex challenges. We strive for a culture of trust and respect, where everyone contributes their perspectives and authentic selves, reaches their potential as individuals and teams, and collaborates to do the best work of their lives.
We recognize that diversity and inclusion is a journey, and we are committed to learning, listening, and evolving to become more diverse, equitable and inclusive than we are today.
Equal Employment Opportunity
Mercy Corps is an equal opportunity employer that does not tolerate discrimination on any basis. We actively seek out diverse backgrounds, perspectives, and skills so that we can be collectively stronger and have sustained global impact.
We are committed to providing an environment of respect and psychological safety where equal employment opportunities are available to all. We do not engage in or tolerate discrimination based on race, color, gender identity, gender expression, religion, age, sexual orientation, national or ethnic origin, disability (including HIV/AIDS status), marital status, military veteran status or any other protected group in the locations where we work.
Safeguarding & Ethics
Mercy Corps is committed to ensuring that all individuals we come into contact with through our work, whether team members, community members, program participants or others, are treated with respect and dignity. We are committed to the core principles regarding prevention of sexual exploitation and abuse laid out by the UN Secretary General and IASC and have signed on to the Interagency Misconduct Disclosure Scheme. We will not tolerate child abuse, sexual exploitation, abuse, or harassment by or of our team members. As part of our commitment to a safe and inclusive work environment, team members are expected to conduct themselves in a professional manner, respect local laws and customs, and to adhere to Mercy Corps Code of Conduct Policies and values at all times. Team members are required to complete mandatory Code of Conduct eLearning courses upon hire and on an annual basis.
