Privacy Specialist

Overview

The Privacy Specialist at Telecel Ghana is instrumental in developing and maintaining a comprehensive privacy program that complies with both local and international data protection laws such as GDPR, CCPA/CPRA, and industry-specific telecom regulations. Acting as the lead privacy expert, this role shapes privacy policies, oversees risk assessments, manages breach incidents, and promotes a culture prioritizing data privacy throughout the organization.

Key Duties

• Formulate, enforce, and sustain company-wide privacy policies, programs, procedures, and controls.
• Perform privacy and data protection impact assessments for products, technologies, and business processes.
• Keep abreast and ensure adherence to data privacy legislations including updates on GDPR, CCPA/CPRA, and Ghana's privacy frameworks.
• Serve as the chief liaison for internal departments, regulatory bodies like the Data Protection Commission, National Communications Authority, Bank of Ghana, and clients regarding privacy concerns.
• Manage data subject access and other individual rights requests efficiently and within compliance thresholds.
• Lead investigations, notifications, mitigation strategies, and reporting of data breaches in line with legal mandates.
• Design and maintain a Data Breach Incident Response Plan and coordinate breach response activities.
• Regularly assess privacy risks and identify areas for procedural improvements.
• Maintain detailed records documenting data processing activities to fulfil statutory documentation requirements.
• Develop and roll out role-specific privacy training to all employees to heighten privacy awareness.
• Produce internal communications to reinforce privacy policy adherence and best practices.
• Collaborate closely with diverse teams including IT, Security, Legal, Product, Marketing, and HR to integrate privacy considerations into business processes and systems.
• Engage with external industry bodies such as Mobile Network Operators, Telecommunications Chamber, and legal specialists on sector-wide privacy matters.
• Report privacy program status and performance regularly to senior management and board members.
• Oversee internal privacy investigations to ensure compliance and satisfactory issue resolution.

Qualifications and Experience

• Bachelor’s degree in Law, Business, IT or a related discipline, with a preference for candidates holding a Master’s degree.
• At least six years of experience in privacy, compliance, or legal roles, preferably in telecommunications or other heavily regulated sectors.
• Demonstrated success in meeting key performance indicators within privacy or compliance frameworks.
• Professional certifications such as CIPM, CIPP/E, or CIPP/US are highly desirable.
• Comprehensive understanding of global and regional data privacy legislation including GDPR, CCPA/CPRA, and Ghanaian privacy laws.
• Sound knowledge of data security principles and technologies.
• Strong analytical, problem-solving, and communication capabilities.
• Ability to operate both independently and collaboratively across various functional groups.
• Exemplifies high ethical standards, professionalism, and integrity.
• Experience with privacy management software tools is advantageous.