Enter a job title or keyword
Data Protection And Information Security Analyst
Job Location:
Job Location:
Dar es Salaam - Tanzania
Monthly Salary:
Not provided by the employer
Monthly Salary:
Experience Required:
1-3years
Experience Required:
Posted:
24 September 2026 (Yesterday)
Posted:
Application Deadline:
22 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
JOB PURPOSE
The Data Protection and Information Security Analyst supports both internal operations and customer-facing engagements in ensuring compliance with the Personal Data Protection Act (PDPA) 2022 maintaining information security controls in line with ISO 27001 and protecting the confidentiality integrity and availability of information assets. The role involves monitoring assessing and improving data protection and information security practices across clients and within the organization managing incidents and conducting training and awareness initiatives to strengthen overall compliance and security posture.
Responsibilities
DATA PROTECTION & PRIVACY COMPLIANCE
Support the implementation and maintenance of the organizations data protection framework.
Assist in developing and maintaining the Record of Processing Activities (ROPA).
Conduct regular Data Protection Impact Assessments (DPIAs) and advise departments on mitigating privacy risks.
Review data processing agreements and contracts to ensure compliance with PDPA 2022 requirements.
Assist in responding to data subject access requests (DSARs) and managing privacy incidents or breaches.
Monitor data transfer activities to ensure compliance with cross-border data flow restrictions.
Support the DPO in preparing periodic compliance and audit reports for management and regulators.
INFORMATION SECURITY OPERATIONS
Implement monitor and continually improve information security controls under the Integrated Management System (IMS) aligned with ISO 9001:2015 and ISO/IEC 27001:2022 standards.
Conduct risk assessments and support the development of mitigation plans.
Participate in vulnerability assessments and coordinate with relevant teams for remediation.
Monitor system logs alerts and incidents to detect and respond to security threats.
Support in developing and maintaining the Information Security Management System (ISMS) documentation.
Coordinate internal and client security awareness and training programmes.
GOVERNANCE POLICY & AWARENESS
Develop and maintain policies procedures and guidelines on data protection and information security.
Conduct awareness sessions for employees customers and third parties on privacy and cybersecurity best practices.
Collaborate with IT Legal HR and other departments to embed data protection and security in daily operations.
INCIDENT MANAGEMENT & REPORTING
Participate in incident response activities including investigation containment and reporting.
Maintain the incident register and assist in preparing incident reports for the DPO and management.
Support business continuity and disaster recovery initiatives.
Requirements
Knowledge and Experience
Bachelors degree in Computer Science Information Technology Information Security or related field.
Foundational knowledge of data protection information security or quality management systems.
Preferred certifications (any of the following would be an advantage but not mandatory): o ISO/IEC 27001 Foundation Implementer or Auditor o ISO 9001 Internal Auditor o CompTIA Security CEH or equivalent cybersecurity certification o Data Protection or Privacy certification o ISACA certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA).
Minimum of 3 years experience in information security data protection or related field.
Familiarity with Tanzanias PDPA 2022 GDPR or similar privacy regulations.
Good understanding of documentation and record-keeping within a structured management system.
Required Skills:
Knowledge and Experience Bachelors degree in Computer Science Information Technology Information Security or related field. Foundational knowledge of data protection information security or quality management systems. Preferred certifications (any of the following would be an advantage but not mandatory): o ISO/IEC 27001 Foundation Implementer or Auditor o ISO 9001 Internal Auditor o CompTIA Security CEH or equivalent cybersecurity certification o Data Protection or Privacy certification o ISACA certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA). Minimum of 3 years experience in information security data protection or related field. Familiarity with Tanzanias PDPA 2022 GDPR or similar privacy regulations. Good understanding of documentation and record-keeping within a structured management system.
