Thuto SACCOS is a member-owned Savings and Credit Cooperative Society committed to delivering secure, innovative, and member-focused financial services. To strengthen its governance and regulatory compliance framework, the Society invites applications from suitably qualified and experienced individuals for the position of Data Protection Officer, on a 3-5 years fixed term contract.
Job Summary
- Type: contract
- Location: Gaborone
- Category: Information Technology
- Closing Date: 2026-07-31
Key Responsibilities
- Reporting to the Risk and Compliance Manager, ensure that the Society complies with the Data Protection Act and all applicable data protection and privacy regulations.
- Develop and oversee data protection policies.
- Promote a culture of privacy.
- Monitor compliance.
- Serve as the primary liaison and point of contact with regulatory and supervisory authorities on data protection matters.
- Ensure personal information is processed securely and in accordance with approved policies and legislation.
- Monitor developments in data protection laws and recommend appropriate policy and procedural changes.
- Develop, implement, and maintain the Society’s data protection policies, procedures, and privacy framework.
- Conduct regular compliance audits and reviews of data processing activities.
- Coordinate and oversee Data Protection Impact Assessments (DPIAs) where required.
- Identify, assess, and mitigate data privacy risks across the Society.
- Develop incident response procedures for data breaches and oversee investigations and reporting.
- Monitor the implementation of appropriate data security and privacy controls.
- Design and deliver staff awareness programmes on data protection and privacy obligations.
- Promote a culture of data privacy and compliance throughout the Society.
- Develop educational materials and guidance for employees.
- Manage requests relating to access, correction, deletion, restriction, and other rights of data subjects.
- Ensure all requests and complaints are handled within statutory timelines and legal requirements.
- Maintain accurate records of processing activities.
- Ensure data processing agreements with third parties comply with applicable legal requirements.
- Prepare compliance reports for Management and regulators.
- Collaborate with Management and Information Technology teams to strengthen data governance and information security.
- Coordinate communication with regulatory authorities regarding compliance matters and breach notifications.
- Represent the Society on matters relating to data protection compliance.
Requirements
- A Bachelor’s Degree in Law, Information Technology, Business Administration, Information Security, or a related field.
- A minimum of three (3) years’ experience in data protection, privacy, information governance, compliance, or information security.
- Demonstrated knowledge of the Data Protection Act and internationally recognised data protection principles and best practices.
- Experience in developing and implementing data protection policies and compliance programmes.
- Strong analytical, investigative, and problem-solving skills.
- Excellent communication, report writing, and stakeholder engagement skills.
- High standards of integrity, confidentiality, and professionalism.
- Experience within the financial services sector, particularly a Savings and Credit Cooperative Society (SACCOS), banking, insurance, or other regulated financial institution, will be an added advantage.
- Professional certification in Data Protection, Privacy, Information Security, or Compliance (such as CIPP, CIPM, CDPSE, ISO 27001 Lead Implementer/ Auditor, or equivalent) will be an added advantage.
- Knowledge of Data Protection and Privacy Laws
- Compliance and Regulatory Management
- Risk Assessment
- Information Governance
- Policy Development and Implementation
- Analytical and Critical Thinking
- Communication and Influencing Skills
- Planning and Organising
- Confidentiality and Ethical Conduct
- Attention to Detail
Salary
Attractive and competitive remuneration package
How to Apply
Apply by email: recruitment@thutosaccos.co.bw
Address: PO BOX 45821, RIVERWALK, GABORONE
Address: PO BOX 45821, RIVERWALK, GABORONE
REF Code: Circular No. 2 of 2026 | Vacancy Circular No: Circular No. 2 of 2026
About the Company
Thuto SACCOS Limited is a cooperative financial institution deeply rooted in Botswana, structured to serve its members. Operating as a member-owned entity, it delivers crucial financial services to support the economic well-being of its constituents. Eligibility for membership is specifically extended to employees working for the Government of Botswana and various Parastatals across the nation. This targeted approach ensures that Thuto SACCOS effectively caters to the distinct financial needs of Botswana's public sector workforce.
A cooperative financial institution for Botswana's public sector employees.
Website: https://www.thutosaccos.co.bw/
Frequently Asked Questions
What qualifications and certifications are typically required for a Data Protection Officer role in Botswana?
A Bachelor's degree in IT, Law, or a related field is often essential, coupled with internationally recognized privacy certifications like CIPP/E or CIPM. Employers also highly value practical experience in data privacy compliance, information security, and a deep understanding of the Botswana Data Protection Act.
What are the common day-to-day responsibilities of a Data Protection Officer in a Botswana-based organization?
Daily tasks involve monitoring compliance with the Botswana Data Protection Act (2018), conducting data protection impact assessments, and advising on data privacy best practices. You would also manage data subject requests, facilitate staff training, and act as the primary contact for regulatory authorities.
What is the typical work culture and expectations for a DPO role within a financial institution in Botswana?
Financial institutions in Botswana emphasize professionalism, adherence to regulations, and a strong ethical approach to data handling. Expect a collaborative environment, but also a high degree of autonomy and accountability given the sensitive nature of the DPO role.
What are the realistic career progression opportunities for a Data Protection Officer in Botswana?
A DPO can advance to roles like Head of Compliance, Information Security Manager, or a senior advisory position focusing on data governance within larger organizations. Continuous professional development and staying updated with local and international privacy laws are crucial for growth in this field.
What typical benefits can a Data Protection Officer expect in a professional role in Botswana?
Standard benefits generally include annual leave, sick leave, and contributions to a pension fund, which is often mandated by law. Many professional employers also offer medical aid coverage and potentially performance-based bonuses, though these vary by organization.
What are employers in Botswana typically looking for when hiring for a DPO role, and what's the best way to apply?
Employers seek candidates with strong legal and IT acumen, demonstrable experience in data privacy, and excellent communication skills. Applications are usually submitted online with a detailed CV and cover letter tailored to highlight compliance experience and an understanding of the Botswana Data Protection Act.