Background information about the job or company:

The Junior Data Protection Officer (DPO) will support the Information Security Manager in ensuring that Virtus Global Security Ltd maintains the highest standards of data protection and information security across all its operations. The role will primarily focus on safeguarding client information and data, particularly within the ITMS Project and other related systems, ensuring compliance with applicable data protection laws, internal policies, and industry best practices.

Responsibilities or duties:

• Support the implementation and monitoring of data protection policies, procedures, and controls across the organization.
• Ensure compliance with national data protection regulations, GDPR principles (where applicable), and company standards.
• Work closely with the IT and Project Management teams on the ITMS Project to ensure that client data is collected, stored, and processed securely.
• Conduct periodic audits and assessments of data handling processes to identify risks and recommend corrective actions.
• Assist in managing data breaches or incidents by documenting, investigating, and reporting in accordance with internal protocols.
• Maintain and update records of data processing activities.
• Support awareness and training programs on data protection and privacy for staff members.
• Liaise with clients and internal stakeholders on data protection queries, ensuring timely and accurate responses.
• Contribute to the continuous improvement of information security and privacy management systems.
• Assist in preparing compliance reports and documentation for audits and reviews.

Qualifications or requirements:

• Bachelor’s / Diploma degree in Law, Information Security, or a related field.
• Certification in data protection, privacy, or information security (e.g., CIPP/E, CIPM, ISO 27001, or equivalent) is an added advantage.

Experience needed:

1–2 years of experience in data protection, information security, compliance, or related field. Familiarity with data protection regulations and best practices (e.g., GDPR, Data Protection and Privacy Act, 2019 – Uganda).

• Support the implementation and monitoring of data protection policies, procedures, and controls across the organization.
• Ensure compliance with national data protection regulations, GDPR principles (where applicable), and company standards.
• Work closely with the IT and Project Management teams on the ITMS Project to ensure that client data is collected, stored, and processed securely.
• Conduct periodic audits and assessments of data handling processes to identify risks and recommend corrective actions.
• Assist in managing data breaches or incidents by documenting, investigating, and reporting in accordance with internal protocols.
• Maintain and update records of data processing activities.
• Support awareness and training programs on data protection and privacy for staff members.
• Liaise with clients and internal stakeholders on data protection queries, ensuring timely and accurate responses.
• Contribute to the continuous improvement of information security and privacy management systems.
• Assist in preparing compliance reports and documentation for audits and reviews.

• Bachelor’s / Diploma degree in Law, Information Security, or a related field.
• Certification in data protection, privacy, or information security (e.g., CIPP/E, CIPM, ISO 27001, or equivalent) is an added advantage.