Data Protection Legal Adviser

Purpose of the Role As a member of the Data Protection Office (DPO), the position holder contributes to safeguarding the ICRC's ability to process personal data responsibly and in line with its mandate, notably in sensitive humanitarian contexts. The role covers two core areas of responsibility: Supervision and monitoring of the application of ICRC Rules on Personal Data Protection in the processing of personal data within the ICRC, ensuring that data processing activities across the organization remain compliant and that risks are identified and addressed in a timely manner. Support to ICRC departments and delegations in the implementation of ICRC Rules on Personal Data Protection, providing legal analysis and advice; notably ensuring policy developments and Data Protection by Design and by Default, so that data protection considerations are embedded from the outset in new tools, processes, and initiatives across the organization. Main Duties & Responsibilities Support Delegations and Regions, and ICRC Departments in the implementation of ICRC Rules on Personal Data Protection: Advise on the effective application of ICRC Rules on Personal Data Protection and related Policies (notably the Biometrics Policy) and guidelines. Develop procedures, guidelines, and templates/forms, including Information Notices and ToUs. Engage and advise on engagements with stakeholders on data protection and privacy issues, including the negotiation of data processing or data sharing agreements. Ensure the implementation of Data Protection by design and by default in projects or within the development of new data processing. Including: Support to DPIAs, Implement the Cloud Strategy framework when applicable: support to Data Classification, Legal Assessment, and review of the Risk Management frame workin coordination with relevant departments. Support the contractual agreements in line with ICRC Rules As a member of the DPO Advise on the management of data breaches in coordination with information security and in support of the staff in charge, Support the development and update of ICRC Rules and related policies, Ensure data subjects can exercise their rights, Support the monitoring of the application of ICRC Rules within the institution, and Identify issues and/or cases that should be transmitted to the ICRC Independent Commission on Data Protection, Provide trainings or information sessions on Data Protection to the ICRC departments, Participate to external engagement or to relevant panels and events, Monitos relevant DP/ Privacy legal developments and conduct ad hoc research on DP in Humanitarian action questions, Ensure a proper information management of DPO documentation, guidance, guidelines, findings, opinions, advisory opinions and inputs.

Education & Experience Required Bachelor’s or Master’s degree in Law, International Law, or Human Rights Strong knowledge of data protection law, supported by Data Protection Officer certification Excellent written and spoken English; proficiency in French or Spanish is a valuable asset Skilled in Microsoft Office (Word, Excel, PowerPoint) 10–12 years of overall professional experience Approximately 5 years as a legal adviser or attorney is a strong asset Around 2 years of experience in data protection or privacy (an asset) Operational experience in the humanitarian sector, ideally as a program coordinator, manager, or in a similar role