Short Term Consultant (STC) – Data Privacy

Start Date: September 18, 2023

Express Interest By: 9/1/2023

Duration: 90

Topics: Not Available

Business Function: Not Available

Skills: Not Available

Language Skills: Not Available

Assignment Location: United States

Institution: IFC

VPU: Legal (LEG)

Contact Person: Anna Grace Populorum (apopulorum@ifc.org)

Task Description: Description

IFC—a member of the World Bank Group—is the largest global development institution focused on the private sector in emerging markets. We work in more than 100 countries, using our capital, expertise, and influence to create markets and opportunities in developing countries. In fiscal year 2022, IFC committed a record $32.8 billion to private companies and financial institutions in developing countries, leveraging the power of the private sector to end extreme poverty and boost shared prosperity as economies grapple with the impacts of global compounding crises. For more information, visit www.ifc.org

The Business Risk and Compliance Department (CBR) is responsible for setting business standards and providing advice and guidance to the IFC Board, Management, and business teams in relation to certain non-financial business risks that may arise in IFC investments, advisory work, and corporate functions. These non-financial risks include internal risks, such as data privacy, operational conflicts of interest, confidentiality, and data access governance, as well as external risks such as corruption, fraud, and know-your customer (KYC) issues, anti-money-laundering (AML/CFT), economic sanctions, tax good governance, and market conduct.

This position will serve as part of the Data Privacy Office (DPO) within CBR. The DPO has the mandate to develop, establish and maintain the privacy posture and risk appetite for IFC regarding the processing of personal data, consistent with the World Bank Group Personal Data Privacy Policy. The DPO serves as the central focal point for IFC privacy related issues. It advises on the identification, assessment and mitigation of risks associated with the processing of the significant volume of personal data collected in connection with IFC’s investment and advisory operations, trains staff and consultants as appropriate, and monitors for compliance. The DPO also serves as a privacy thought leader in the broader multilateral development bank community and DPO staff are frequent speakers on data protection topics at international privacy events and conferences. This position will also assist on matters related to the use of confidential commercial data and data access governance under the mandate of the Data Access and Control Office (DACO).

This position is ideal for an early career professional who has experience in privacy, is passionate to learn about emerging markets and development work and wants to gain experience by working in a dynamic data privacy office at an international organization.

Duties and Responsibilities

•  Advising business teams regarding general compliance with IFC’s privacy policies and procedures and answering business teams’ project-specific privacy questions
•  Contributing to privacy and confidential data training and knowledge management/sharing projects and initiatives
•  Preparing content for learning materials and tools (e.g., PowerPoint decks, tip sheets, infographics)
•  Assisting in the development, review and update of policies and procedures on privacy related matters
•  Assisting in the development, review and update of policies and procedures related to the sharing of confidential commercial data and data access governance
•  Preparing thought leadership materials in connection with IFC’s role in the broader multilateral development bank (MDB) privacy community
•  Keeping abreast of and sharing knowledge on development of privacy standards
•  Carry out other duties as assigned by the IFC Chief Data Privacy Officer.

Selection Criteria

We seek a highly motivated individual who will bring the following qualities and capabilities to this position:

•  Master’s degree or equivalent with 3 years of relevant or equivalent privacy experience, including internships
•  Demonstrated knowledge of privacy laws, regulations and industry best practices
•  Privacy certifications (e.g. from the International Association of Privacy Professionals (IAPP)) a plus
•  Strong research and writing skills
•  Experience developing and presenting engaging workshops and trainings
•  Detail oriented and organized with the ability to multi-task and work in a very fast paced team environment
•  Effective analytical, problem-solving, and organizational skills.
•  Proactive, self-starter, who is motivated, resourceful, focused, and works with minimal supervision
•  Proven track record of high-quality work and high level of motivation, commitment, and reliability
•  Dedication to IFC’s mission and mandate

How to Apply: Resumes and one-page letters of interest should be sent to Anna Grace Populorum < apopulorum@ifc.org>. Please write “Application STC- CBR Data Privacy” in the subject line. Only short-listed candidates will be contacted for an interview.