Reports to: AUC President
Purpose:
The job holder will lead and oversee the University's data privacy protection program in compliance with Egypt's Personal Data Protection Law N0. 151 of 2020 and the regulations of the Personal Data Protection Center (PDPC). The job holder will serve as AUC's primary point of contact with the PDPC, ensuring that data collection, processing, storage activities, and data protection information systems across the University are lawful, transparent, secure, and consistent with regulatory requirements and institutional policy. He or She will report directly to the President and work with the University Data Governance Steering Committee (DGSC) on policy and regulatory matters.
Responsibilities:
Implementation:
- Oversee the University's personal data privacy protection framework, ensuring alignment with Egypt's Personal Data Protection Law and PDPC regulations
- Serve as AUC's official point of contact with the Personal Data Protection Center (PDPC)
- Maintain the register of processing activities
- Prepare and coordinate the University’s applications for PDPC licenses, permits, and registrations, and monitor their status and renewal dates
- Advocate on behalf of the University’s operations to regulators
Evaluation and corrections:
- Periodically evaluate and inspect the University's data privacy protection systems and IT security measures to confirm that the personal data they hold is collected, processed, stored, and transferred in compliance with the law
- Maintain the University's personal data protection registers, provide all mandatory reporting to the PDPC, identify violations and, where the Law requires, notify affected data subjects of personal data breaches within the required timelines, and confirm in coordination with the DGSC and the president, that the responsible units correct them
Data Subject Rights and Breach Notification:
- Help data subjects exercise their rights under the Personal Data Protection Law and respond to their requests and complaints and to related PDPC inquiries within required timelines
Third-Party and Cross-Border Data Transfers:
- Ensure data processing agreements are in place, where third parties are involved in processing of data on AUC’s behalf
- Monitor privacy assessments of vendors and third parties before they process personal data on AUC's behalf and assess cross-border data transfers and the need for regulatory representation in consultation with the DGSC
Awareness and Training:
- Organize training programs so staff can meet the University's data protection obligations
Additional Responsibilities:
- Undertake related personal data protection responsibilities as directed by the President
Qualifications and Skills:
Education and Experience:
- A relevant bachelor's degree is required, a relevant master's degree or professional certification is a plus
- A minimum of seven years of progressive experience in data protection, privacy, or regulatory compliance
- Registration on the Personal Data Protection Center's (PDPC) DPO Registry is required, including passing its examination and meeting its eligibility criteria; Employment is conditional on registration within prescribed timeline.
Technical Skills:
- In-depth knowledge of Egypt's Personal Data Protection Law, PDPC regulations and guidelines, and international data privacy protection frameworks
- Ability to assess data protection risks, breach assessment and incident response, including notifications within statutory deadlines
- Working knowledge of information systems, data flows, and security controls sufficient to evaluate the University’s personal data protection measures and to work with the office of Information Technology
- Ability to advise senior leadership, engage with regulators, and manage data subject requests and complaints
- Ability to understand and advocate for university operational needs
- Excellent written and spoken communication in English and Arabic
- A high level of confidentiality and discretion
This position is open until filled.
Placement is based on the candidate’s experience and skills. Only candidates who make it to the short list will be contacted.
"The American University in Cairo is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Individuals with disabilities are encouraged to apply."
“We thank all individuals who have expressed interest in working at The American University in Cairo.”
