Background information about the job or company

The role involves monitoring, assessing, and improving data protection and information security practices across clients and within the organization. The Analyst will also manage incidents and conduct training and awareness initiatives to strengthen overall compliance and security posture.

Responsibilities or duties

Data protection and privacy compliance

The Data Protection & Information Security Analyst will be responsible for supporting privacy and compliance activities, including:

• Supporting the implementation and maintenance of the organization’s data protection framework.
• Assisting in developing and maintaining the Record of Processing Activities (ROPA).
• Conducting regular Data Protection Impact Assessments (DPIAs) and advising departments on mitigating privacy risks.
• Reviewing data processing agreements and contracts to ensure compliance with PDPA 2022 requirements.
• Assisting in responding to data subject access requests (DSARs) and managing privacy incidents or breaches.
• Monitoring data transfer activities to ensure compliance with cross-border data flow restrictions.
• Supporting the DPO in preparing periodic compliance and audit reports for management and regulators.

Information security operations

The role will also support information security operations by:

• Implementing, monitoring, and continually improving information security controls under the Integrated Management System (IMS) aligned with ISO 9001:2015 and ISO/IEC 27001:2022 standards.
• Conducting risk assessments and supporting the development of mitigation plans.
• Participating in vulnerability assessments and coordinating with relevant teams for remediation.
• Monitoring system logs, alerts, and incidents to detect and respond to security threats.
• Supporting the development and maintenance of the Information Security Management System (ISMS) documentation.
• Coordinating internal and client security awareness and training programmes.

Governance, policy and awareness

The Analyst will support governance and awareness initiatives through the following duties:

• Developing and maintaining policies, procedures, and guidelines on data protection and information security.
• Conducting awareness sessions for employees, customers, and third parties on privacy and cybersecurity best practices.
• Collaborating with IT, Legal, HR, and other departments to embed data protection and security in daily operations.

Incident management and reporting

The role includes responsibilities related to incident response and reporting, such as:

• Participating in incident response activities, including investigation, containment, and reporting.
• Maintaining the incident register and assisting in preparing incident reports for the DPO and management.
• Supporting business continuity and disaster recovery initiatives.

Qualifications or requirements

Qualifications and experience

Applicants should meet the following qualifications and experience requirements:

• Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field.
• Foundational knowledge of data protection, information security, or quality management systems.
• Minimum of 3 years’ experience in information security, data protection, or a related field.
• Familiarity with Tanzania’s PDPA 2022, GDPR, or similar privacy regulations.
• Good understanding of documentation and record-keeping within a structured management system.

Preferred certifications

The following certifications would be an added advantage, but are not mandatory:

• ISO/IEC 27001 Foundation, Implementer, or Auditor.
• ISO 9001 Internal Auditor.
• CompTIA Security+, CEH, or equivalent cybersecurity certification.
• Data Protection or Privacy certification.
• ISACA Certified Information Security Manager (CISM).
• Certified Information Systems Auditor (CISA).

Skills required

Applicants should have the following skills:

• Data and analytics skills.
• Data organization and documentation.
• Cross-functional collaboration.
• Problem-solving skills.
• Collaboration and teamwork.
• Attention to detail and accuracy.
• Organizational skills.
• Communication skills.

• Supporting the implementation and maintenance of the organization’s data protection framework.
• Assisting in developing and maintaining the Record of Processing Activities (ROPA).
• Conducting regular Data Protection Impact Assessments (DPIAs) and advising departments on mitigating privacy risks.
• Reviewing data processing agreements and contracts to ensure compliance with PDPA 2022 requirements.
• Assisting in responding to data subject access requests (DSARs) and managing privacy incidents or breaches.
• Monitoring data transfer activities to ensure compliance with cross-border data flow restrictions.
• Supporting the DPO in preparing periodic compliance and audit reports for management and regulators.
• Implementing, monitoring, and continually improving information security controls under the Integrated Management System (IMS) aligned with ISO 9001:2015 and ISO/IEC 27001:2022 standards.
• Conducting risk assessments and supporting the development of mitigation plans.
• Participating in vulnerability assessments and coordinating with relevant teams for remediation.
• Monitoring system logs, alerts, and incidents to detect and respond to security threats.
• Supporting the development and maintenance of the Information Security Management System (ISMS) documentation.
• Coordinating internal and client security awareness and training programmes.
• Developing and maintaining policies, procedures, and guidelines on data protection and information security.
• Conducting awareness sessions for employees, customers, and third parties on privacy and cybersecurity best practices.
• Collaborating with IT, Legal, HR, and other departments to embed data protection and security in daily operations.
• Participating in incident response activities, including investigation, containment, and reporting.
• Maintaining the incident register and assisting in preparing incident reports for the DPO and management.
• Supporting business continuity and disaster recovery initiatives.

• Data and analytics skills.
• Data organization and documentation.
• Cross-functional collaboration.
• Problem-solving skills.
• Collaboration and teamwork.
• Attention to detail and accuracy.
• Organizational skills.
• Communication skills.

• Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field.
• Foundational knowledge of data protection, information security, or quality management systems.
• Minimum of 3 years’ experience in information security, data protection, or a related field.
• Familiarity with Tanzania’s PDPA 2022, GDPR, or similar privacy regulations.
• Good understanding of documentation and record-keeping within a structured management system.