Consultant Data Protection Information Security Consultant

Client of United Nation careers

The Consultant will work closely with program teams, IT staff, and field offices to: - Analyze and document data flows and systems used in Education and Health programs. - Identify gaps and risks in current data processing practices. - Recommend technical and organizational measures to ensure compliance with UNRWA s Data Protection Policy. - Support the integration of data protection principles into program operations and digital platforms. Specific Outputs/Tasks include but not limited to: Systems and Data Mapping - Conduct a comprehensive mapping of digital systems and data flows within Education and Health programs. - Document types of personal and sensitive data collected, processed, stored, and shared. - Identify third-party systems or integrations and assess associated data protection risks. Gap Analysis and Risk Assessment - Perform gap analyses against UNRWA s Data Protection Policy and international standards. - Conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities. - Identify vulnerabilities and recommend mitigation strategies. Policy Implementation Support - Translate policy requirements into practical guidance for program and IT teams. - Develop templates, checklists, and SOPs to support compliance. - Advise on privacy-by-design and data minimization strategies. Capacity Building and Awareness - Deliver tailored training sessions and awareness materials for Education and Health staff. - Build capacity for field-level personnel to manage data responsibly and securely. Reporting and Coordination - Prepare reports and presentations for internal stakeholders and donors (e.g., KfW). - Coordinate with legal, ethics, and program teams to ensure integrated approaches. - Participate in relevant inter-agency or donor coordination platforms as needed. DELIVERABLES - Review UNRWA s Data Protection Policy and KfW program documentation - Develop work plan and methodology for field-level analysis - Conduct system and data mapping - agency wide - Assess compliance with Data Protection Policy - agency wide - Draft preliminary findings and recommendations - agency wide - Synthesize findings across all fields - Identify common challenges and best practices - Develop cross-field recommendations - Draft templates and SOPs for data protection compliance - Provide advisory support to program teams - Provision and implementation of capacity building plans, by developing the material and the toolkit and delivering the training sessions - Refine SOPs, templates, and checklists - Prepare consolidated guidance package - Review with HQ and field stakeholders - Submit final report covering all deliverables - Present findings to senior management and donors