Short Term Consultant – Data Access Governance
Start Date: September 11, 2023
Express Interest By: 8/14/2023
Duration: 150
Topics: Not Available
Business Function: Not Available
Skills: Not Available
Language Skills: Not Available
Assignment Location: United States
Institution: IFC
VPU: Legal (LEG)
Contact Person: Stefanie Lourenço (slourenco@ifc.org)
Task Description: Background and Purpose of Assignment
IFC, a member of the World Bank Group, is the largest global development institution focused on the private sector in emerging markets. Working in more than 100 countries, we use our capital, expertise, and influence to create markets and opportunities in the toughest areas of the world. In fiscal year 2023, ending June 30, IFC committed a record $42 billion to private companies and financial institutions in developing countries, leveraging the power of the private sector to end extreme poverty and boost shared prosperity as economies grapple with the impacts of global compounding crises. For more information, visit www.ifc.org.
The Business Risk and Compliance Department (CBR), under the Legal and Compliance Risk Vice-Presidency, is responsible for setting business standards and providing advice and guidance to the IFC Board, Management and business departments in relation to certain non-financial business risks that may arise in IFC investments, advisory work and corporate functions. Among the non-financial risks covered by CBR are confidentiality, data access governance, corporate cyber security, and technology business risk. The Data Access and Confidentiality Office (DACO) in CBR ensures that access to restricted information is managed in line with IFC’s confidentiality obligations and expectations. DACO acts as a second line of defense, overseeing the IT and business departments’ activities relating to access governance.
To support these activities, DACO is seeking to appoint a Short Term Consultant (STC) with legal qualifications and experience. As part of the DACO team, you will play a crucial part in laying the groundwork for our comprehensive data governance program. Your contributions will directly impact our organization’s ability to safeguard sensitive data. If you are enthusiastic about data, possess strong analytical and writing skills, and are eager to make a difference, this is an exciting opportunity for you.
The successful candidate will report to the DACO Counsel and will work closely with the other team members of DACO.
This is a short-term assignment for up to 90 business days, renewable up to 150 business days between the hiring date and June 30, 2024.
This position will be based out of Washington, D.C.
Role & Responsibilities
- Collaborate with cross-functional teams to develop and draft IFC’s data access governance policies and procedures
- Use your analytical skills, good judgment and creativity to advise business teams on access governance questions, including, for example, how to utilize data analytics tools like Microsoft Power BI to improve efficiency and drive value while appropriately safeguarding IFC’s confidential information
- Work closely with the DACO Counsel to respond to requests for information from external parties like the OECD and donor governments
- Advise business teams on novel legal and technology risks that arise in IFC’s client-facing operations
- Liaise with DACO’s counterparts at other multilateral development banks to gain insights into their data access governance policies and practices and establish IFC as a thought leader among MDBs in the data access governance space
- Review and advise business teams on their contractual confidentiality obligations
- Work closely with the DACO team to develop and deliver training programs and materials to educate IFC Staff on data access policies and procedures
- Research and prepare briefs on confidentiality and other data and technology related risks that arise in the context of IFC projects and engagements
- Provide logistics and support for the case management and record keeping activities of DACO
Minimum Qualifications
- Qualified to practice law in one or more jurisdictions
- Master’s degree (law school) and at least 2 years of legal experience with a well-recognized law firm, international financial institution or international organization in the areas of data protection, data policy, cybersecurity, project advisory or legal risk management
- Excellent legal writing and analytical skills, with the ability to convey complicated legal matters in simple and concise language
- Detail oriented and organized, able to multi-task and interact with multidisciplinary teams, including IT and business teams at different levels of seniority, and able to work in a fast-paced environment
- Familiarity with international organizations and their internal legal frameworks a plus
- Ability to create engaging and well-structured training materials a plus
- Diplomacy and ability to work with individuals from diverse cultures and backgrounds
- Strong sense of personal integrity, values and ethics
