Compliance Auditor job at National Information Technology Authority- Uganda (NITA-U)

Job Purpose

The Compliance Auditor will be responsible for providing assurance that data controllers and processors subject to the Data Protection and Privacy Act, Cap 97 and its Regulations have implemented effective technical and organisational measures to safeguard personal data.

Key Accountabilities

• Carry out activities to monitor compliance and report on the observance of the right to privacy of a person and of personal data.
• Provide guidance to audited entities on closing gaps and embedding privacy-by-design principles.
• Contribute to compliance clinics, awareness and capacity building sessions.
• Participate in investigations, on‑site inspections and evidence‑gathering activities to ensure proportionate regulatory action.
• Represent PDPO at sector working groups, and standard-setting forums and gather input to refine PDPO’s audit and inspection manual.
• Perform any other responsibilities as may be assigned

Minimum Requirements

Education

• Bachelor of Information Technology, Computer Science degree or related area from a recognized university is required;
• CISA or CISM is a requirement;
• An internationally recognized Data Protection and Privacy certification is an added advantage.

Experience

• A minimum of three (3) years working experience in compliance, risk or auditing role in a reputable public or private organisation

Technical Competencies

• Knowledgeable about Cyber and Data Protection and Privacy laws;
• Familiarity with audit management tools and data analytics techniques; and
• Working understanding of Information Security controls

Behavioural Competencies

• Able to prioritize and co-ordinate work streams/projects to drive delivery of tasks.
• A resilient team player with a ‘can do’ attitude, who is willing to take responsibility leading and working with others to create breakthrough solutions to complex problems.
• Excellent interpersonal and communication skills (both oral and written).

• Carry out activities to monitor compliance and report on the observance of the right to privacy of a person and of personal data.
• Provide guidance to audited entities on closing gaps and embedding privacy-by-design principles.
• Contribute to compliance clinics, awareness and capacity building sessions.
• Participate in investigations, on‑site inspections and evidence‑gathering activities to ensure proportionate regulatory action.
• Represent PDPO at sector working groups, and standard-setting forums and gather input to refine PDPO’s audit and inspection manual.
• Perform any other responsibilities as may be assigned

• Knowledgeable about Cyber and Data Protection and Privacy laws;
• Familiarity with audit management tools and data analytics techniques; and
• Working understanding of Information Security controls
• Able to prioritize and co-ordinate work streams/projects to drive delivery of tasks.
• A resilient team player with a ‘can do’ attitude, who is willing to take responsibility leading and working with others to create breakthrough solutions to complex problems.
• Excellent interpersonal and communication skills (both oral and written).

• Bachelor of Information Technology, Computer Science degree or related area from a recognized university is required;
• CISA or CISM is a requirement;
• An internationally recognized Data Protection and Privacy certification is an added advantage.