Compliance Officer- Data Access Governance

Contract

This is a World Bank Group grade: GG contract. More about World Bank Group grade: GG contracts.

Compliance Officer- Data Access Governance

Description

IFC—a member of the World Bank Group—is the largest global development institution focused on the private sector in emerging markets. We work in more than 100 countries, using our capital, expertise, and influence to create markets and opportunities in developing countries. In fiscal year 2022, IFC committed a record $32.8 billion to private companies and financial institutions in developing countries, leveraging the power of the private sector to end extreme poverty and boost shared prosperity as economies grapple with the impacts of global compounding crises. For more information, visit www.ifc.org.

The Business Risk and Compliance Department (CBR) is responsible for setting business standards and providing advice and guidance to the IFC Board, Management and business teams in relation to a diverse range of non-financial business risks that may arise in IFC investments, advisory work and corporate functions. Among the non-financial risks covered by CBR are confidentiality, data access governance, corporate cyber security and technology business risk. The Data Access and Control Office (DACO) in CBR ensures that access to restricted information in key IFC systems is managed in line with IFC confidentiality obligations and expectations and performs second line of defense compliance oversight of related access governance rules.

To support the management of these non-financial risks, CBR is recruiting a Compliance Officer – Data Access Governance, to play a major role in the implementation of a new a new data access governance framework for IFC (currently in development). The successful candidate will report to the Head of Conflicts and Data Access (Head of Office). S/he will also work closely with the other unit Heads in CBR.

Duties and Responsibilities:

The Compliance Officer – Data Access Governance will be based in Washington, D.C., and will have the following responsibilities:

• Working closely with the Head of Office, draft and support the approval and implementation of IFC and WBG policies and procedures on data access governance, along with guidance documents, like job aids, directed to technical, legal, and business teams.

• Work closely with the Head of Office contribute to introducing a new data access governance framework for IFC (currently in development), including:

• Delineating first and second line of defense responsibilities based on industry practice adapted to an international/multilateral development bank setting, and

• Finalizing and maintaining standards to ensure that access to restricted information in key IFC systems is managed in line with IFC confidentiality obligations and expectations.

• Be the point of contact for multiple business/technical teams developing systems and knowledge products, to ensure that confidentiality-driven access rules are built into their products. This involves:

• Creating/ maintaining confidentiality-focused data requirements (process and technical) that apply universally to multiple systems and products, reviewing specific requirements sets, and introducing supporting knowledge materials for technical, legal, and business audiences, especially on information classification, access, sharing and information barriers.

• Developing test objectives for access rights.

• Overseeing the reviews of business and IT-driven access rules to ensure they do not conflict with universal confidentiality requirements and support the Head of Office in resolving escalated issues, as needed.

• Oversee inventories and annual access governance certifications of selected systems, components and user groups, and maintain auditable records.

• Provide guidance to business teams and IT on data access governance, as needed.

• Closely follow industry practice in the above areas and be a knowledge champion and go-to resource person for CBR and across IFC on data access governance.

• Proactively look for opportunities to collaborate across IFC and the WBG in the above areas.

The functions of the Data Access and Confidentiality Office in CBR are evolving and the role will likely include future opportunities to:

• Contribute to the development of a comprehensive due diligence framework for analysis of emerging technology business risks in IFC operations, including risks related to digital assets.

• Contribute to IFC corporate efforts on transactional due diligence of cybersecurity risks.

• Cooperate closely with CBR staff working on IFC’s own cyber security risk management program, incl. through provision of technical inputs in the various playbooks and contribution to delivery of cyber security tabletop exercises and trainings.

• Contribute to the development of business and data requirements for IT, as well as to the management of the IT relationship, across other data-centric areas of CBR, such as privacy.

IFC—a member of the World Bank Group—is the largest global development institution focused on the private sector in emerging markets. We work in more than 100 countries, using our capital, expertise, and influence to create markets and opportunities in developing countries. In fiscal year 2022, IFC committed a record $32.8 billion to private companies and financial institutions in developing countries, leveraging the power of the private sector to end extreme poverty and boost shared prosperity as economies grapple with the impacts of global compounding crises. For more information, visit www.ifc.org.

Selection Criteria

The ideal candidate will bring the following qualities and capabilities to this position:

• Bachelors’ degree or equivalent in computer science, computer engineering, data science, data analytics or similar. Masters in a related field or an MBA is a plus.

• At least 8 years of experience in data governance, access management, and/or data management, with the ability to influence technology teams across reporting lines along system and data lifecycles.

• Strong private sector work experience in data access governance, preferably in the financial sector, preferred.

• Familiarity with international financial institutions and the development community is a plus.

• Clear thinking, exceptional writing skills, and the ability to distill complex technical analysis into accurate and concise guidance for business and non-IT teams.

• Experience and interest in research and development of publications and/or knowledge materials is a plus.

• Demonstrable experience in developing and giving effective and engaging training presentations to technical and non-technical staff and Management.

And Tackling All of the Above With:

• Highly developed technical skills, solid judgment, ability to work independently and demonstrate sound judgment on what to escalate.

• Ability to build effective client and other relationships.

• Genuine commitment to sharing knowledge and expertise.

• Diplomacy and ability to work with individuals from diverse cultures and backgrounds.

• Strong organizational skills with an ability to work under time pressures and respond to ad hoc shifts in priorities while maintaining order and delivery.

• Demonstrated commitment to our core values, including excellence, mutual respect, collegiality, teamwork, diversity and inclusiveness, integrity, innovation, transparency and accountability.

World Bank Group Core Competencies

The World Bank Group offers comprehensive benefits, including a retirement plan; medical, life and disability insurance; and paid leave, including parental leave, as well as reasonable accommodations for individuals with disabilities.

We are proud to be an equal opportunity and inclusive employer with a dedicated and committed workforce, and do not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.

Learn more about working at the World Bank and IFC, including our values and inspiring stories.