Data Protection Officer (DPO)

The Data Protection Officer (DPO) shall establish, maintain, and monitor PDA's data protection, privacy, and data governance programme to ensure responsible handling of personal, sensitive, financial, and confidential information in accordance with applicable laws, regulations, contractual requirements, and organizational policies. Job ID: PDA-J165.

• Develop and maintain data protection, privacy and data governance policies and procedures
• Maintain data inventories, data flows and Records of Processing Activities (RoPA)
• Assess privacy risks and conduct/oversee Data Protection Impact Assessments (DPIAs)
• Ensure Privacy by Design and Privacy by Default across applications and processes
• Establish processes for handling data-subject rights and privacy requests
• Assess third-party data-processing risks and advise on data-sharing and cross-border transfers
• Support investigation and management of data breaches and privacy incidents
• Provide privacy guidance for new applications, cloud services and emerging technologies
• Coordinate with Information Security, IT, Legal, Compliance, Risk, Audit, HR and Procurement
• Prepare periodic privacy, compliance and data-protection risk reports for senior management

• Bachelor's or Master's - Bachelor's/Master's in Cybersecurity, Bachelor's/Master's in Information Security, Bachelor's/Master's in Information Technology, Bachelor's/Master's in Law, Bachelor's/Master's in Compliance, Bachelor's/Master's in Risk Management, in Cyber Security, Information Technology, Law, Compliance, Risk Management, recognised by HEC
• Bachelor's or Master's degree in Cybersecurity, Information Security, Information Technology, Law, Compliance, Risk Management or related discipline from HEC-recognized institution
• ISO 27701 Lead Implementer/Auditor, CISM, CISSP or equivalent certifications preferred
• Working knowledge of GDPR principles, local privacy legislation, ISO 27001/ISO 27701 and privacy compliance frameworks
• Basic understanding of cybersecurity, cloud, databases, encryption, IAM and DLP preferred

• Required experience: At least 4 years
• Minimum 4+ years of relevant experience in data protection, privacy, information security, compliance, risk management or related field; experience in RoPA, DPIAs, privacy risk assessment, data classification, retention, third-party processing or data breach management preferred

• Paper type: Mcqs

1. Send application via email to jobs@pda.gov.pk
2. Use email subject: Application: Data Protection Officer (DPO) (PDA-J165)
3. Applications reviewed on rolling basis until position is filled

Advertised by

Pakistan Digital Authority (PDA)

Application link

pda.gov.pk

Added to this site

15 Oct 2026

No advertisement file is on record for this vacancy. Confirm every detail on the official site before applying.

• Report an error in this listing
• How we check listings