Senior Data Protection Auditor

9 Jun 2026 Senior Data Protection Auditor at Precision Recruitment

• Plan, conduct, and conclude annual and ad hoc data protection audits across public and private sector data controllers and processors. • Assess compliance levels against the Data Protection Act No. 3 of 2021, including lawfulness, fairness, and transparency of processing activities. • Evaluate the effectiveness of data protection policies, procedures, and technical/organisational security measures including encryption, access controls, and incident response. • Identify and document data protection risks, vulnerabilities, and gaps likely to result in non-compliance or data breaches. • Prepare comprehensive audit reports in line with the ODPC audit report template, including findings, risk ratings, and recommendations. • Conduct interviews with data controllers, processors, and relevant staff to gather audit evidence. • Review data processing agreements, privacy notices, consent mechanisms, and data subject rights procedures. • Deliver presentations of audit findings to client stakeholders and management teams. • Promote awareness of data protection principles and rights among client stakeholders during audit engagements. • Maintain organised and complete audit working papers and evidence files. • Support the organisation’s response to ODPC submissions, including timely delivery of audit reports. • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Law, or a related field. • At least one cyber security or data protection or privacy certification from the following: CISA, CISSP, CEH, CIPM, CIPP/E, CIPT, CDPO, CDPSE, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor. • Current membership with the ICT Association of Zambia (ICTAZ). • Membership with ISACA, IIA, or IAPP is a strong advantage.