To maintain effective data protection policies, procedures and practices that mitigate the risks associated with handling personal data of various stakeholders. The Data Protection Manager will serve as the primary point of contact for all data protection matters within the Institution and be responsible for ensuring compliance with data protection laws and regulations, including Botswana’s Data Protection Act.
Job Summary
- Type: contract
- Location: Gaborone
- Category: Data Protection
- Closing Date: 2026-07-10
Key Responsibilities
- Develop, review and implement data protection policies, standards and procedures.
- Ensure the Institution develops and implements robust technical and organizational safeguards to protect personal data against breaches, ensuring compliance with the security obligations outlined in the Act. Such measures include automation with encryption, authentication, pseudonymization, among others.
- Inform and advise the Institution including its employees of their obligations under the Data Protection Act.
- Conduct regular audits and risk assessments to ensure compliance and effectiveness of internal controls in line with organizational methodologies.
- Lead investigations into data breaches or suspected breaches and produce reports on findings and implements corrective measures to prevent a recurrence.
- Deliver training and awareness programs for staff on data protection principles and responsibilities.
- Maintain a comprehensive record of data processing activities conducted by the College.
- Handle and respond to data subject requests within the required timeframes, ensuring proper verification and authentication procedures are followed.
- Serve as the point of contact for data subjects (e.g., students, staff, alumni) regarding their data rights (e.g., access, correction, deletion).
- Act as the primary liaison between the Institution and Information and Data Protection Commission.
Requirements
- Master’s Degree in Law/Data Science/Enterprise Risk Management/Information Management or related field from a reputable institution.
- Data Protection and/or Privacy certification such as CIPP (Certified Information Privacy Professional), CIPM (Certified Information Privacy Manager), and CDPO (Certified Data Protection Officer) etc, is required and Certificate in Enterprise Risk Management (if not holding a Master’s in ERM).
- Knowledge of IT systems and data governance.
- Artificial technology knowledge is an added advantage.
How to Apply
Applications should be addressed to:
Head of Human Resources
Botswana School of Business Sciences
P/Bag 00319
Gaborone
Contact: +267 75 020 088
About the Company
Botswana Accountancy College (BAC) is a leading tertiary education institution specializing in professional and academic qualifications across business, finance, accounting, computing, and hospitality. Established in 1996 as a joint venture between the Ministry of Finance and Development Planning and Debswana Diamond Company (Pty) Ltd, BAC plays a pivotal role in developing skilled professionals for Botswana's economy. The college offers a range of internationally recognized programmes through strategic partnerships with reputable universities and professional bodies. It is renowned for its strong industry links, high-quality education delivery, and significant contributions to human capital development in the region. BAC has firmly established itself as a premier provider of business-focused higher education in Botswana.
Your Future, Our Focus.
Website: https://www.bac.ac.bw
Frequently Asked Questions
What typical qualifications, certifications, or education are expected for a Data Protection Manager role in Botswana?
Candidates often need a degree in Law, IT, or Information Management, along with certifications like CIPP/E, CIPM, or relevant ISO standards. Practical experience in data privacy compliance and a strong understanding of local regulations, such as the Data Protection Act of Botswana, are highly valued.
What are the common day-to-day responsibilities of a Data Protection Manager in a Botswana educational institution?
Day-to-day tasks involve monitoring compliance with data protection laws, conducting privacy impact assessments, and managing data breach responses. You'll also provide training to staff and act as the primary contact for data protection inquiries from regulators or data subjects.
What is the typical work culture and expectations for a Data Protection Manager within an educational institution in Botswana?
The work culture often emphasizes professionalism, collaboration, and adherence to established protocols. Managers are expected to demonstrate strong leadership, foster a culture of compliance, and effectively communicate complex data protection concepts to diverse stakeholders across the institution.
What are the realistic career progression or growth paths for a Data Protection Manager in Botswana?
Career progression might involve moving into broader compliance or risk management roles within the organization or in larger private sector companies. Opportunities could also arise in consulting for data protection, leveraging specialized expertise across various industries in Botswana.
What typical benefits, such as leave, medical aid, and pension, can a Data Protection Manager expect in Botswana's educational sector?
Standard benefits typically include a set number of annual leave days, contributions to a medical aid scheme, and a pension fund. Other potential benefits might include professional development opportunities or allowances, varying by institution.