DATA PROTECTION OFFICER -Botswana Railways

Vacancy 

Botswana Railways invites legal professionals with a strong track record of accomplishment to apply for the position of Data Protection Officer, tenable at Botswana Railways Headquarters, Mahalapye. This position reports directly to the General Manager.

Position Summary:

The Data Protection Officer (DPO) is responsible for ensuring Botswana Railways’ compliance with data protection laws and supporting the broader legal and regulatory compliance framework across the organization. The DPO monitors internal compliance, advises on legal obligations, and serves as a contact point for data subjects, regulatory authorities, and internal stakeholders. The officer is further responsible for implementing and maintaining data protection and compliance policies, conducting audits, managing data breaches, promoting a culture of privacy, and assisting with organizational legal compliance efforts.

Experience and Qualifications:

• A minimum of five (5) years post-qualification experience as a holder of a Bachelor’s degree in Law.

• At least three (3) years of that experience must be in data protection compliance or a related field.

• Expertise in data protection laws and practices, including a deep understanding of the General Data Protection Regulations (GDPR).

• Experience in a legal, audit, or risk management role.

• Candidate must have a valid certificate of practice.

Duties and Responsibilities:

The duties and responsibilities include, but are not limited to:

• Monitoring compliance with data protection regulations, including conducting internal audits, policy reviews, and awareness-raising activities.

• Informing and advising the organization and its employees on their obligations under applicable data protection laws.

• Providing advice on Data Protection Impact Assessments (DPIAs) and ensuring that necessary remedial actions are taken.

• Implementing and maintaining the organization’s data protection policies, procedures, and systems to ensure ongoing legal compliance.

• Acting as the primary point of contact for individuals (data subjects) regarding the exercise of their rights, and for regulatory authorities such as the Botswana Communications and Regulatory Authority (BOCRA).

• Developing and maintaining a Data Security Incident Response Plan to ensure the timely identification, investigation, and reporting of data breaches and incidents.

• Drafting, reviewing, and updating privacy notices, consent forms, and data protection-related contractual clauses and agreements.

• Conducting regular training and sensitization programs for employees on data protection and privacy matters.

• Monitoring developments in privacy and data protection laws to ensure continued compliance with evolving regulatory requirements.

• Assisting the General Counsel and Board Secretary in monitoring and supporting Botswana Railways’ broader legal and regulatory compliance obligations across various functional areas.

• Supporting the development and maintenance of the corporate compliance framework, ensuring operations align with applicable laws, regulations, standards, and internal policies.

• Conducting legal compliance awareness sessions and contributing to staff training initiatives on key regulatory requirements.

• Assisting in the investigation and reporting of potential non-compliance incidents and recommending appropriate remedial measures.

• Maintaining compliance registers, assisting with legal risk assessments, and coordinating internal and external audits related to regulatory compliance.

• Supporting corporate governance initiatives, including compliance with statutory, regulatory, and contractual obligations. 

Preferred Skills and Competencies

• Ability to work effectively under pressure and manage sensitive and confidential information.
• Strong analytical and problem-solving skills with a focus on compliance and risk management.
• Excellent understanding and practical application of data protection legislation and broader regulatory frameworks.
• Strong written and verbal communication skills to engage effectively with staff, data subjects, and regulators.
• Ability to identify compliance risks, propose mitigations, and support the development of compliance strategies.
• Proactive and self-motivated approach to driving a culture of compliance and good governance.