Under the general direction of the Chief Executive Officer, the Data Protection Officer is responsible for ensuring the Ministry operates in accordance with the Data Protection Act 2020. The incumbent is also responsible for providing technical advice and coordinating all aspects relating to data privacy. S/he will play a critical role in safeguarding the privacy rights of individuals for whom data is held or processed by the CPFSA and will ensure that sensitive data is protected in accordance with the law.
The post
Job title
Data Protection Officer
Job grade
Level 8
Post number
TMP15394EX
Agency
Child Protection and Family Services Agency
Reports to
Chief Executive Officer
Salary – level 8
Salary: $4,266,270 – $5,737,659 per annum
From the employer’s own page, checked 29 September 2026. Open their page
What you’ll do
External regulations (Data Protection Act) and internal controls adhered to;
Data Protection framework and strategy developed and implemented;
Data protection impact assessments conducted;
Breaches identified and notifications prepared;
Reports prepared and submitted;
Continuous monitoring conducted;
Read the rest
Adherence/compliance with standards monitored;
Governance and accountability mechanisms evaluated and recommendations made;
Research and analysis conducted and findings documented;
Continuous improvement strategies developed and implemented;
Advice and recommendations provided;
Sensitization sessions conducted.
Implement measures and a privacy governance framework to manage data use in compliance with the Data Protection Act, including developing templates for data collection, and assisting with data mapping.
Ensures that the Child Protection and Family Services Agency (CPFSA) processes personal data in compliance with the data protection standards and the Data Protection Act and good practice;
Consults with the Office of the Information Commissioner (OIC) to resolve any doubt about how the provisions of the Data Protection Act and any Regulations made thereunder are to be applied;
Ensures that any contravention of the data protection standards or any provisions of the Data Protection Act by the CPFSA is dealt with in accordance with the provisions of the Data Protection Act;
Keeps abreast of Jamaica Data Protection laws and regulations, and industry best practices and international laws including the European Union’s General Data Protection Regulations (GDPR), Electronic Privacy Act and other international data protection laws;
Notifies in writing, the Data Controller of any contravention of the data protection standards or any provisions of the Data Protection Act;
Investigate and respond to data security breaches or security incidents promptly, ensuring appropriate notices are provided to the regulatory authorities, affected individuals, and other relevant parties as required by law.
Reports any contravention by the CPFSA of the data protection standards or any provisions of the Data Protection Act to the OIC, if the contravention is not rectified within reasonable time after the notification;
Assists data subjects in the exercise of their rights under the Data Protection Act, in relation to the
Develops internal policies and procedures related to the processing of personal data;
Makes recommendations for the appropriate organizational and technical measures to ensure the security of personal data;
Serves as the primary contact for the OIC on issues relating to the processing of data, and to consult, where appropriate, with regard to any other matter;
Develops and implements Standard Operating Procedures (SOPs) for addressing all complaints pertaining to the Agency’s privacy policies and procedures;
Provides advice/information to the CPFSA and its employees on their obligations under the Data Protection Act and state data protection provisions;
Manages and conducts ongoing reviews of the Agency’s Data Protection Framework;
Disseminates current information on policies, procedures and legislation for the Ministry’s staff to be aware as well as to promote the quality culture;
Develops and implements approved certification mechanisms to exhibit compliance;
Monitors and evaluates recommendations implemented for addressing weakness and deficiencies in relation to the processing of personal data;
Prepares reports and presentations on analysis and findings;
Conducts a data protection Impact Assessment in respect of all personal data in the custody or control of the CPFSA;
Conduct periodic assessments to identify potential risks, gaps, or breaches in data protection and develop strategies to mitigate these risks.
Conduct sensitization sessions for staff on the components of the Data Protection Act, Regulations and policies;
Collaborates with the CPFSA’s ICT Division in the maintenance of a data security incident management plan to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims or notifications and responding to subject access requests;
Collaborates with the relevant officers from the Internal Audit Unit, Legal Services Unit and other key stakeholders to monitor, implement and analyze compliance programmes;
Monitors to ensure that the Agency’s ICT systems and procedures conform with the relevant data privacy and protection law, regulation and policy;
Participates in the collection of data, analysis and reports on key performance measures;
Provides responses to comments and queries from data subjects in relation to the processing of personal data;
Provide regular reporting to the Chief Executive Officer and the Executive Team of the CPFSA on data protection activities, compliance status and emerging privacy risks.
Monitors changes to local privacy laws and makes recommendations where necessary.
Performs any other duty as assigned by the Chief Executive Officer.
Performance standards
Continuous monitoring conducted within accordance with legislative framework;
Technical advice and recommendations provided within agreed timeframes;
Sensitization sessions conducted within agreed timeframes.
What they’re asking for
Eligible at grade Level 8
Minimum required education and experience
Bachelor’s degree in Computer Science, Audit or equivalent qualification from recognized tertiary institution
Certification in Information Security, Data Protection and/or Privacy Certification such as CIPP, CIPT, ISEB, etc. (preferred)
Exposure to legal training would be an asset
Sound knowledge of the Data Protection Act and other applicable data protection policies
One (1) year related work experience
Required competencies
Core
Excellent oral and written communication
Excellent presentation skills
Excellent analytical, judgement, decision making and problem solving skills
Excellent planning and organising skills
Excellent interpersonal skills to foster harmonious working environment
Read the rest
Strong customer service and quality focus skills
High level of integrity and confidentiality Technical
Sound knowledge of applicable laws, policies, regulation and procedures
Good knowledge of auditing techniques and practices
Good knowledge of risk management techniques and strategies
Knowledge of Corporate Governance Framework for Public Bodies in Jamaica
Good knowledge and understanding of GOJ policies and programmes and the machinery of government
Understanding of data management and information security principles, including encryption, access controls and risk management
Good critical reasoning, quantitative and qualitative analysis skills
Knowledge of change management principles and practices
Strong environmental scanning, analysis and interpretive skills
Strong negotiating and persuasive presentation skills
Experience in conducting data protection impact assessments and developing privacy policies, procedures, and guidelines
Experience with handling data breaches, incidents, and interactions with the Office of the Information Commissioner
Proficiency in the use of the relevant computer applications
Good to know
Normal office working environment.
May be required to work beyond normal work hours in order to meet deadlines.
May be required to work on public holidays/weekends.
Possession of a valid Drivers’ Licence and a reliable motor vehicle.
More from the employer’s posting
Contacts
Internal Contact (Title) Purpose of Communication Chief Executive Officer To receive and provide guidance and technical advice Internal Audit To provide technical advice and guidance ICT Division To provide technical advice and guidance Divisional/Branch/Unit Heads To provide technical advice and guidance Regional Offices To provide technical advice and guidance All Staff Members To provide technical advice and guidance
External Contact (Title) Purpose of Communication Office of the Information Commissioner To obtain and share information relating to the administration of the Act Ministries, Departments & Agencies To receive and provide information, consultation Regional/International Partners To receive and provide information Members of the Public To receive and provide information
Authority to
Recommend security procedures and maintenance for Data Protection
Report breaches to the OIC
Develop and review data protection policies
Maintain risk and breach register
Take remedial action for breaches
Conduct training and sensitization relating to data protection
Data Protection Security Audits
Recommends appropriate standards
Recommends improvements in corporate governance framework
Recommends changes to regulatory framework
Access to highly personal confidential and sensitive data/information
This role asks for a portfolio of work. You haven’t added it yet.That’s fine: you can still apply. Your letter lists it in brackets. Keep the line if you’re sending it; delete it if you’re not.
The closing date, Wed 21 October 2026, has passed, so there is nothing to apply to. We keep it so you can tell a missed deadline from a role we never had.
Child Protection & Family Services Agency Identity verified
Firearm Licensing Authority Identity verified
Ministry of Justice & Constitutional Affairs Identity verified