Senior Data Protection Auditor

Overview We are recruiting! Our client in Lusaka, is looking for a Senior Data Protection Auditor to join their team for a job vacancy within the IT industry. To apply, or for more information, follow the link below. Senior Data Protection Auditor Department – Data Protection & Compliance Purpose of the Role The Data Protection Auditor is responsible for planning and executing data protection compliance audits across assigned client organisations. The role serves as the primary audit delivery professional, ensuring audits are conducted in line with the Data Protection Act No. 3 of 2021 and the ODPC audit framework. The incumbent will lead fieldwork, assess technical and organisational controls, produce formal audit reports, and provide actionable recommendations to controllers and processors. Key Responsibilities Plan, conduct, and conclude annual and ad hoc data protection audits across public and private sector data controllers and processors. Assess compliance levels against the Data Protection Act No. 3 of 2021, including lawfulness, fairness, and transparency of processing activities. Evaluate the effectiveness of data protection policies, procedures, and technical/organisational security measures including encryption, access controls, and incident response. Identify and document data protection risks, vulnerabilities, and gaps likely to result in non-compliance or data breaches. Prepare comprehensive audit reports in line with the ODPC audit report template, including findings, risk ratings, and recommendations. Conduct interviews with data controllers, processors, and relevant staff to gather audit evidence. Review data processing agreements, privacy notices, consent mechanisms, and data subject rights procedures. Deliver presentations of audit findings to client stakeholders and management teams. Promote awareness of data protection principles and rights among client stakeholders during audit engagements. Maintain organised and complete audit working papers