Tebeleope is a non-profit health and wellness organization dedicated to protecting and improving the lives of communities across Botswana for over 25 years. Tebeleope facilities are situated in 23 locations serving residents in rural and urban areas. Tebeleope is currently seeking a qualified candidate for the Data Protection Officer role.
Job Summary
- Employer: Tebeleope
- Job Type: Full-time
- Location: Gaborone, Botswana
- Category: Legal
- Salary: A competitive package commensurate with experience and qualifications
- Closing Date: 2026-09-30
Key Responsibilities
- Monitor Compliance: Track adherence to data protection privacy laws, internal privacy policies, and third-party processing agreements.
- Conduct Audits: Schedule and perform routine data protection audits to identify systematic compliance gaps, technical exposures and processing risks.
- Maintain Documentation: Ensure the organization creates and routinely updates a centralised register of processing activities.
- Oversee the organization’s DPIA’s: Lead the teams through the Data Protection Impact Assessments (DPIA’s) before launching high risk data processing systems or new technologies.
- Develop Privacy Frameworks: Draft, implement and review the organization’s data protection policy, data retention policy, Information security policy and data sharing agreements.
- Advise Leadership: Deliver direct compliance updates, quarterly risk metrics, and strategic governance counsel to Board members and Senior Management
- Regulatory Point of contact: Cooperate directly with Data Protection Commission during inquiries or standard audits.
- Facilitate Individual Rights: Manage and respond to Data Subjects Access Requests, privacy complaints, and requests for data deletion or rectification.
- Triage Data Incidents: Lead or consult on the containment and impact evaluation of potential personal data breaches.
- Manage Notifications: Advise the organization on its legal obligations regarding swift breach notifications to both regulators and affected individuals.
- Educate staff: Conduct regular compliance workshops and training sessions for employees handling personally identifiable information.
- Promote Privacy by Design: Work alongside system developers and IT teams during early design reviews to embed privacy defaults into new systems.
Requirements
- Bachelor’s degree in Information Technology, Law, Risk Management, Business Administration or related field.
- Data Protection certification
- At least 5 years in data governance, compliance or security management
- Experience working with government, district health teams and healthcare facilities.
- Experience working in NGO, donor-funded or government health programmes.
- Proven experience handling personal data, data compliance, security of data or related.
- Knowledgeable in Data Protection Regulation Protocols.
- Strong attention to detail and accuracy in data analysis and documentation
- Commitment to maintaining confidentiality and data security
- Ability to lead and direct teams
Salary
A competitive package commensurate with experience and qualifications
How to Apply
Apply by email: recruitments@tebeleope.org.bw
Phone: +267 3958014
Address: Human Resources Manager, Tebeleope Wellness Centre, Private Bag 112 Gaborone
Phone: +267 3958014
Address: Human Resources Manager, Tebeleope Wellness Centre, Private Bag 112 Gaborone
About the Company
Tebelelo Mazile Seretse was the first woman to serve as ambassador to the United States from Botswana. While a member of Parliament from 1999 - 2004, she had three Cabinet level positions: Acting Minister of Presidential Affairs, Minister of Trade and Industry, Wildlife and Tourism and Minister of Works, Transport and Communications.
Frequently Asked Questions
What qualifications or certifications are typically required for a Data Protection Officer role in Botswana?
Most employers require a law degree or qualification in information technology, compliance, or a related field. Professional certifications such as CIPP/E, CIPM, or CDPSE are highly valued. Knowledge of Botswana's Data Protection Act, 2018 and regional frameworks like the AU Convention on Cyber Security is essential.
What are the typical day-to-day responsibilities of a Data Protection Officer at a company like Tebelepele?
You will monitor compliance with data protection laws, conduct privacy impact assessments, and respond to data subject access requests. The role involves training staff on data handling, maintaining records of processing activities, and liaising with the Information and Data Protection Commission when necessary.
How does workplace culture in Botswana typically affect this legal role?
Botswana workplaces value respect for hierarchy and collaborative decision-making, so you will often build consensus across departments rather than impose rules. Punctuality and professional courtesy are expected, and relationship-building with colleagues is important for influencing data governance practices.
What career progression opportunities exist for Data Protection Officers in Botswana?
With experience, you can advance to Head of Compliance, Chief Privacy Officer, or broader legal and risk management roles. Some professionals transition into consultancy or join regional bodies addressing data protection across SADC. Specialising in emerging areas like cybersecurity law or fintech regulation can accelerate growth.
What employee benefits are commonly offered for full-time legal positions in Gaborone?
Standard benefits typically include annual leave of 15-25 days, medical aid contributions, and pension scheme participation through BPOPF or private providers. Some employers offer professional development allowances for maintaining certifications. Benefit packages vary by employer size and sector.
How should I apply for a Data Protection Officer position in Botswana, and what do employers prioritise?
Submit a tailored CV highlighting relevant certifications and practical experience with data protection frameworks. Employers prioritise demonstrated knowledge of Botswana's legal landscape, attention to detail, and ability to communicate complex regulations to non-technical staff. Prepare for interviews that assess both technical competency and cultural fit.
