Data Protection Compliance Manager – Malawi Communications Regulatory Authority (MACRA)
Job Description
The Malawi Communications Regulatory Authority (MACRA) is a statutory body established under the
Communications Act (Cap. 68:01 of the Laws of Malawi) to regulate the provision of services in the communications sector of Malawi, comprising telecommunications, posts and broadcasting.
Under the Communications Act, MACRA is mandated to regulate and monitor the provision of communications services and ensure that, as far as it is practicable, reliable and affordable communications services are provided throughout Malawi. The Vision of MACRA is to ensure
the provision of communication services for a digitally transformed nation.
In order to fulfil its mandate effectively and efficiently with strategic leadership and management, an opportunity has arisen within MACRA to fill various vacant positions. The positions are highly demanding that require persons who have demonstrable capacity to initiate innovations geared
at making MACRA a rejuvenated, vibrant and competitive Authority. The following are the details of the vacant positions.
Data Protection Compliance Manager (MA4)
Job Purpose
The Data Protection Compliance Manager is responsible for ensuring that data controllers and processors comply with the provisions of the Data Protection Act. The role entails implementing registration processes, raising data protection awareness, conducting audits, and fostering
collaboration with key stakeholders.
Duties and Responsibilities
i. Develop and implement a robust data protection compliance framework in line with legal and
regulatory requirements.
ii. Oversee the registration and maintenance of a comprehensive register of data controllers and
processors of significant importance.
iii. Promote awareness and understanding of data protection regulations through training programs,
workshops, and outreach initiatives for stakeholders and the public.
iv. Coordinate and conduct compliance audits to assess adherence to data protection requirements and
recommend corrective actions.
v. Collaborate and engage with stakeholders, including data subjects, data controllers/ Processors,
governmental institutions, private organizations, and civil society, to ensure alignment with data protection goals.
vi. Develop guidelines and best practice documents for data protection compliance.
vii. Provide expert advice to the Authority and stakeholders on compliance obligations and data
protection matters.
viii. Prepare reports on compliance-related activities and findings for submission to relevant authorities.
ix. Support the development and implementation of data protection policies and procedures.
x. Establish and maintain processes for handling data protection impact assessments.
xi. Monitor changes in data protection laws and regulations and implement necessary updates to the
compliance program.
xii. Any other duties as assigned from time to time.
Educational, Professional Qualifications and Experience
i. Master’s Degree in Law, Computer Science, Information Communication Technology (ICT), or a
related field;
ii. Advanced certification in data protection, privacy law, or information security (e.g., CIPP, CIPM, CIPT) is an added advantage;
iii. A minimum of 5 years’ experience in data protection, compliance, or a related regulatory field
Key Competencies
i. Strong knowledge of data protection principles, privacy laws, and the Data Protection Act;
ii. Demonstrated experience in stakeholder engagement and program implementation.
iii. Proficiency in conducting audits and preparing compliance reports.
METHOD OF APPLICATION
Applicants are required to apply by filling out the form on the following link https://tinyurl.com/ye8d2bs9. The application process requires you to fill out the form and upload copies of your certificates on the link provided on the form. Please ensure you have a good internet connection. The application process is estimated to take 20 minutes to complete. Please submit your application by end of the day of 7th February 2025.
MACRA is an equal opportunity employer, and all genders are encouraged to apply
Only short-listed candidates will be acknowledged.