Location: United States, Remote
Position Status: Full-time, Exempt, Regular
Salary Level: US Starting Salary for this role will be USD $55,600 to $66,025 commensurate on experience.
Valid unrestricted work authorization in the United States is required at the time of application for this position.
About Mercy Corps
Mercy Corps is a leading global organization powered by the belief that a better world is possible. In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions into action โ helping people triumph over adversity and build stronger communities from within.
To do this, we know our teams do their best work when they are diverse, and every team member feels that they belong. We welcome diverse backgrounds, perspectives, and skills so that we can be stronger and have long term impact.
About the Data Protection & Privacy Team
We are a proactive and forward-thinking unit who is taking humanitarian data protection and privacy to the next level of maturity and scalability. Data protection is people protection, and the mission of the Data Protection and Privacy team (DPP) is to build capacity for implementing responsible data practices throughout Mercy Corps in support of our commitments to safeguarding, protecting, and โdoing no harmโ. We provide policies, tools, and training to Mercy Corps staff so that they can manage risks to data that the organization is entrusted with and build trust with program participants, the communities in which Mercy Corps works, partners, and donors.
Examples of our current projects include Mercy Corpsโ Responsible Data Toolkit and the Data Protection and Privacy Guides.
DPP Core Values
- Diversity: DPP is composed of individuals with a range of lived and professional experience, which makes us better suited to working in a global context where differences in culture, regulatory environments, and priorities mean embracing difference while working towards common goals. We welcome applications from LGBTQIA+, BIPOC, and female identifying candidates as well as those who come from, or are located in, the countries in which Mercy Corps works.
- Commitment to safeguarding and the humanitarian principle of doing no harm.
- Ethical use of personal data that is collected, managed, or shared in the course of our work.
- Adaptability: we are committed to balancing the various needs of regional and country staff to improve data protection and privacy. We are committed to Mercy Corpsโ localization agenda and make every effort to create practical, accessible, material to support our goals.
- Innovation and working with change-makers to test, co-create, and scale more effective responsible data solutions in an era of exponentially growing technology.
The Position
The Data Protection Support will contribute to the operational success of the Global Data Protection and Privacy team of Mercy Corps and ensure that the team can support the responsible use of data in 40+ global locations.
Essential Responsibilities
This is an analytical role that will respond to requests from a range of global teams and analyze those requests to ensure compliance and continued improvement related to Mercy Corpsโ responsible data policy. This person will:
- Independently manage and prioritize incoming requests for support with data protection and privacy issues.
- Perform privacy impact assessments; initiate, maintain, and audit records for data systems; and help respond to requests from data subjects. Courteous and prompt response to requests for help is essential.
- Support innovative process improvements to streamline our work.
- Craft and send written communications on behalf of the Data Protection and Privacy team, through email, internal platforms, and regular reports.
- Lead or co-lead regional working group meetings, trainings, and other calls with Data Protection and Privacy team.
- Create or co-create responsible data program materials, documentation, and templates.
- Create and/or assist with quarterly reports using Excel and/or Power BI.
- Analyze Data Protection and Privacy needs of the organization, particularly at the regional level, and identify opportunities for improvement.
- Collaborate on Data Protection and Privacy strategy and future planning efforts.
- Regional support for incident/breach management with data protection or privacy implications.
- Additional duties as assigned.
Supervisory Responsibility
The Data Protection Support role has no supervisory responsibilities.
Accountability
Reports Directly To: Global Privacy Program Manager
Works Directly With: Global Data Protection and Privacy team including Europe DPO/ Head of Operations & Data Protection, Europe, plus team members and program stakeholders across the agency. Priority stakeholders include, Legal, Compliance, and Programs (PaQ, MEL, RPT)
Accountability to Participants and Stakeholders
Mercy Corps team members are expected to support all efforts toward accountability, specifically to our program participants, community partners, other stakeholders, and to international standards guiding international relief and development work. We are committed to actively engaging communities as equal partners in the design, monitoring and evaluation of our field projects.
Minimum Qualification & Transferable Skills
- Bachelor's degree or 3+ years of experience working with data protection and privacy, compliance, or data management. This can be inclusive of Help Desk Management or a similar type of administrative support.
- Proven experience using MS Office (Word, PowerPoint, Excel, Outlook) and Google Suites.
- Fluency in English is required.
- Fluency in Spanish is strongly preferred, followed by Arabic or other languages spoken in countries where Mercy Corps operates.
- Proven ability to initiate, maintain, and audit records.
- Strong analytical thinking and problem-solving skills.
- Ability to deliver a high level of support.
- High level of attention to detail, excellent time management, and prioritization skills.
- Demonstrated ability to effectively manage complex, multi-step projects and procedures consistently.
- Demonstrated ability to work as a member of a remote team: especially by showcasing effective organizational skills and proficiency in both written and verbal communication.
- Ability to collaborate and foster positive relationships.
- Flexible approach, seamlessly shifting between tasks, and delivering effective support.
- Ability to exercise sound judgment and maintain a composed attitude during challenging situations.
- Familiarity with the various data protection and privacy regulations that govern Mercy Corpsโ work, such as the EU General Data Protection Regulation; the California Consumer Privacy Act, HIPPA, preferred.
- Familiarity with ticketing systems such as Jira and/or data protection platforms such as OneTrust is strongly preferred.
- Familiarity with any laws or regulations governing personal data (e.g. HIPPA, CCPA, GDPR) is strongly preferred.
- IAPP certification or similar is strongly preferred.
- Familiarity with digital security, data protection and privacy, or working with data management is preferred.
- Experience working in a diverse global organization.
- Experience with international development is preferred
Success Factors
This is a growth position, and we are committed to investing in someone who can continue to contribute to humanitarian data protection over the long-term. Our work spans the domains of technology, legal, compliance, and training: everybody on the team contributes something unique. We are looking for self-motivated people who prioritize collaboration and who are willing to take on new challenges. You may not have expertise in every area indicated, but you are willing to learn, can make a clear case for how your experience is a good fit, and are able to provide examples of successfully taking on new challenges.