Data Protection and Legal Officer

Contract

This is a P-3 contract. This kind of contract is known as Professional and Director staff. It is normally internationally recruited only. It's a staff contract. It usually requires 5 years of experience, depending on education.

Salary

The salary for this job should be between 74,649 USD and 97,747 USD.

Please keep in mind that the salary displayed here is an estimation by UN Talent based on the location and the type of contract. It may vary depending on the organization. The recruiter should be able to inform you about the exact salary range. In case the job description contains another salary information, please refer to this one.

.

PURPOSE OF POSITION

The International Agency for Research on Cancer (IARC), is the cancer agency of the World Health Organization (WHO) and is based in Lyon, France.

Data protection and specialized legal reviews are of an increasing complexity and importance for IARC’s scientific research work. The data protection officer will ensure IARC’s material compliance with the highest applicable standards including but not limited to the General Data Protection Regulation (GDPR) and those of the International Organisation for Standardization (ISO). The post will also serve the best interest of IARC by providing legal reviews and negotiations on IARC’s contracts with different suppliers to safeguard the organisation status, privileges and immunities.

Under the direct supervision of the Director, Administration and Finance (DAF) and overall guidance of IARC Director, in close coordination with other colleagues in the DAF Office and within the broader Services to Science and Research (SSR) and other branches as applicable, the incumbent provides professional support and advice on data protection and legal reviews of contracts and educate employees and stakeholders on important data compliance requirements, data protection policies, guidelines, and procedures.

The data protection and legal unit’s main objective is to ensure IARC’s material compliance with internationally recognized standards as applicable and to safeguard the organisation’s status, privileges and immunities.

DESCRIPTION OF DUTIES

1. Support the IARC in navigating the complex legislative environment that surrounds the use of, sharing, transferring, and storing, human bio-specimens and sensitive/personal data (e.g., in the context of the GDPR and ISO standards).
2. Draft, review, amend, update and maintain internal data protection policies, guidelines, and procedures, in consultation with key stakeholders.
3. Propose technical and organisational measures to ensure appropriate security of human bio-specimens and personal data as well as developing and implementing organisational controls, policies and procedures that may be required to mitigate any risks identified.
4. Coordinate the network of IARC Data Stewards and regular update of IARC’s Records of Processing Activities (ROPA).
5. Follow up on IARC’s data obligations (including data retention/deletion), in close liaison with the relevant Principal Investigators (PIs) in the scientific branches as well as ITS;
6. Provide expert advice and guidance on Data Transfer Agreements (DTAs) and Data Use Agreements (DUAs).
7. Conduct legal reviews and maintain IARC’s records of all DTAs/DUAs;
8. Guide the concerned parties on bio-banking activities where such activities imply the use of human subjects’ bio-specimens and data, and perform legal review of Material Transfer Agreements (MTAs) whenever needed;
9. Participate in and contribute to regular internal and external data protection related meetings, committees and workshops;
10. Liaise with the World Health Organisation (WHO) on data protection and data privacy related matters, and any other legal aspects that may arise;
11. Advise on non-standard procurement contracts, including performing legal desk review and negotiation with external interlocutors, especially IARC’s suppliers;
12. Support the DAF Office in other related areas including but not limited to drafting information materials, circulars, policy documents, Standard Operating Procedures (SOPs), etc.

COVID-19 MEASURES

Due to the evolving situation resulting from the Covid-19 pandemic, and depending on work requirements, this position may be partly occupied remotely, from the home of the candidate selected in the region Lyon, according to the teleworking clause for force majeure currently in force as part of the IARC teleworking policy during this pandemic period.

WHO COMPETENCIES

• Producing results
• Moving forward in a changing environment
• Fostering integration and teamwork
• Technical expertise
• Communication
• Promoting innovation and organizational learning
• Setting an example.

REQUIRED QUALIFICATIONS

EDUCATION

Essential: Bachelor degree in law, data protection, data privacy, information governance, intellectual property or related field complemented by specialized legal/data protection training in a relevant field to the position nature.

Desirable: Advanced degree in law, data protection, data privacy, information governence, intellectual property or related field

PROFESSIONAL EXPERIENCE

Essential: At least five years of professional experience in the field of legal counselling, including 2 years in the field of data protection.

Desirable:

• UN Experience.
• Experience in a multicultural work environment.
• Experience in an academic or scientific setting.
• Experience in a legal/data protection firm.

USE OF LANGUAGE SKILLS

Expert knowledge of English is essential, working knowledge of French is desirable.

SKILLS

Essential:

• Proven ability to draft and thoroughly review legal and other documents in English as an essential language, and preferably in French language as well.
• Strong organisational and time management skills.

• Ability to work both independently and as a member of a team

• Ability to multitask and work under pressure to meet deadlines.

• High level of accuracy, scrutinization and attention to detail
• Tact, diplomacy, discretion and respect for confidentiality and privacy.
• Knowledge of data protection software such as OneTrust, DataGrail, TrustArc, etc.
• Knowledge of IT data related tools in terms of data storage, data analysis, data management, data security and the risk of inaction.

REMUNERATION

WHO salaries for staff in the Professional category are calculated in US dollars. The remuneration for the above position comprises an annual base salary starting at USD 62,120 (subject to mandatory deductions for pension contributions and health insurance, as applicable), a variable post adjustment, which reflects the cost of living in a particular duty station, and currently amounts to USD 2,163 per month for the duty station indicated above (subject to change). Other benefits include 30 days of annual leave, allowances for dependent family members, home leave, and an education grant for dependent children.

ADDITIONAL INFORMATION

• Only candidates under serious consideration will be contacted.
• A written test and/or seminar presentation may be used as a form of screening.
• In the event that your candidature is retained for an interview, you will be required to provide, in advance, a scanned copy of the degree(s)/diploma(s)/certificate(s) required for this position. IARC/WHO only considers higher educational qualifications obtained from an institution accredited/recognized in the World Higher Education Database (WHED), a list updated by the International Association of Universities (IAU)/United Nations Educational, Scientific and Cultural Organization (UNESCO). The list can be accessed through the link: http://www.whed.net/. Some professional certificates may not appear in the WHED and will require individual review.
• Any appointment/extension of appointment is subject to IARC/WHO Staff Regulations, Staff Rules and Manual.
• WHO staff members in other duty stations are encouraged to apply.
• For information on IARC’S operations please visit: www.iarc.fr
• IARC/WHO is committed to workforce diversity.
• IARC/WHO's workforce adheres to the WHO Values Charter and is committed to put the WHO Values into practice.
• IARC/WHO has a smoke-free environment and does not recruit smokers or users of any form of tobacco.
• Applications from women and from nationals of non and underrepresented Participating States are particularly encourage.