Data Protection Support, Mercy Corps, USA (Remote)

The Data Protection Support will contribute to the operational success of the Global Data Protection and Privacy team of Mercy Corps and ensure that the team can support the responsible use of data in 40+ global locations. This is an analytical role that will respond to requests from a range of global teams and analyze those requests to ensure compliance and continued improvement related to Mercy Corps’ responsible data policy. This is a Full-time, Exempt, Regular position.

About Mercy Corps:

Mercy Corps is a leading global organization powered by the belief that a better world is possible. In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions into action — helping people triumph over adversity and build stronger communities from within. To do this, we know our teams do their best work when they are diverse, and every team member feels that they belong. We welcome diverse backgrounds, perspectives, and skills so that we can be stronger and have long term impact.   

About the Data Protection & Privacy Team:

We are a proactive and forward-thinking unit who is taking humanitarian data protection and privacy to the next level of maturity and scalability. Data protection is people protection, and the mission of the Data Protection and Privacy team (DPP) is to build capacity for implementing responsible data practices throughout Mercy Corps in support of our commitments to safeguarding, protecting, and “doing no harm”. We provide policies, tools, and training to Mercy Corps staff so that they can manage risks to data that the organization is entrusted with and build trust with program participants, the communities in which Mercy Corps works, partners, and donors.  

Examples of our current projects include Mercy Corps’ Responsible Data Toolkit and the Data Protection and Privacy Guides.  

DPP Core Values:

  • Diversity: DPP is composed of individuals with a range of lived and professional experience, which makes us better suited to working in a global context where differences in culture, regulatory environments, and priorities mean embracing difference while working towards common goals. We welcome applications from LGBTQIA+, BIPOC, and female identifying candidates as well as those who come from, or are located in, the countries in which Mercy Corps works.
  • Commitment to safeguarding and the humanitarian principle of doing no harm.
  • Ethical use of personal data that is collected, managed, or shared in the course of our work. 
  • Adaptability: we are committed to balancing the various needs of regional and country staff to improve data protection and privacy. We are committed to Mercy Corps’ localization agenda and make every effort to create practical, accessible, material to support our goals. 
  • Innovation and working with change-makers to test, co-create, and scale more effective responsible data solutions in an era of exponentially growing technology.  

The Position:

The Data Protection Support will contribute to the operational success of the Global Data Protection and Privacy team of Mercy Corps and ensure that the team can support the responsible use of data in 40+ global locations. This position reports directly to Global Privacy Program Manager; also it has no supervisory responsibilities.

Essential Responsibilities:

This is an analytical role that will respond to requests from a range of global teams and analyze those requests to ensure compliance and continued improvement related to Mercy Corps’ responsible data policy. This person will:

  • Independently manage and prioritize incoming requests for support with data protection and privacy issues.  
  • Perform privacy impact assessments; initiate, maintain, and audit records for data systems; and help respond to requests from data subjects. Courteous and prompt response to requests for help is essential. 
  • Support innovative process improvements to streamline our work.  
  • Craft and send written communications on behalf of the Data Protection and Privacy team, through email, internal platforms, and regular reports.  
  • Lead or co-lead regional working group meetings, trainings, and other calls with Data Protection and Privacy team. 
  • Create or co-create responsible data program materials, documentation, and templates. 
  • Create and/or assist with quarterly reports using Excel and/or Power BI. 
  • Analyze Data Protection and Privacy needs of the organization, particularly at the regional level, and identify opportunities for improvement.  
  • Collaborate on Data Protection and Privacy strategy and future planning efforts. 
  • Regional support for incident/breach management with data protection or privacy implications. 
  • Additional duties as assigned.

Works Directly With: 

Global Data Protection and Privacy team including Europe DPO/ Head of Operations & Data Protection, Europe, plus team members and program stakeholders across the agency. Priority stakeholders include, Legal, Compliance, and Programs (PaQ, MEL, RPT)

Accountability to Participants and Stakeholders:

Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.

Qualifications:

Qualification & Minimum Transferable Skills:

  • Bachelor's degree or 3+ years of experience working with data protection and privacy, compliance, or data management. This can be inclusive of Help Desk Management or a similar type of administrative support.  
  • Proven experience using MS Office (Word, PowerPoint, Excel, Outlook) and Google Suites.  
  • Fluency in English is required.
  • Fluency in Spanish is strongly preferred, followed by Arabic or other languages spoken in countries where Mercy Corps operates.  
  • Proven ability to initiate, maintain, and audit records.  
  • Strong analytical thinking and problem-solving skills.  
  • Ability to deliver a high level of support.  
  • High level of attention to detail, excellent time management, and prioritization skills.  
  • Demonstrated ability to effectively manage complex, multi-step projects and procedures consistently.  
  • Demonstrated ability to work as a member of a remote team: especially by showcasing effective organizational skills and proficiency in both written and verbal communication.  
  • Ability to collaborate and foster positive relationships.  
  • Flexible approach, seamlessly shifting between tasks, and delivering effective support. 
  • Ability to exercise sound judgment and maintain a composed attitude during challenging situations.  
  • Familiarity with the various data protection and privacy regulations that govern Mercy Corps’ work, such as the EU General Data Protection Regulation; the California Consumer Privacy Act, HIPPA, preferred. 
  • Familiarity with ticketing systems such as Jira and/or data protection platforms such as OneTrust is strongly preferred.   
  • Familiarity with any laws or regulations governing personal data (e.g. HIPPA, CCPA, GDPR) is strongly preferred.  
  • IAPP certification or similar is strongly preferred.  
  • Familiarity with digital security, data protection and privacy, or working with data management is preferred.  
  • Experience working in a diverse global organization.
  • Experience with international development is preferred.

Compensation:

US Starting Salary for this role will be USD $55,600 to $66,025 commensurate on experience.

Application Submission Information:

Applicants may see the detailed position description and apply here: http://app.jobvite.com/m?3lDlcnwn

NOTE: Valid unrestricted work authorization in the United States is required at the time of application for this position.