Privacy Specialist (Contractor) - Legal, Risk & Compliance

About the role

Tanzania Empowerment Forum Limited (TEF Consult) is recruiting on behalf of its client for a temporary Privacy Specialist to join the Legal, Risk & Compliance function (Legal Affairs) in Dar es Salaam. The role reports to the Senior Privacy Specialist and supports data protection compliance under the Tanzania Personal Data Protection Act (PDPA). It is a hands-on, practical role turning privacy requirements into clear actions for business and technology teams.

Key responsibilities

• Coordinate and conduct Privacy Impact Assessments (PIAs) for new or materially changed products, services, systems and processing activities, track mitigation actions and escalate outstanding material risks.
• Carry out risk-based assessments and reassessments of existing products and processes, and further reviews when processing or risks change.
• Support Security and Privacy by Design and Assurance (SPDA) and work with business and technology teams to identify, document and monitor privacy and security controls.
• Maintain records of the implementation status of privacy controls and follow up with business owners on outstanding actions and gaps.
• Coordinate ad hoc requests for personal data used in analytics and testing through the Privacy team for assessment and approval.
• Maintain and update the Personal Data Processing Register (PDPR).
• Respond to routine privacy queries, prepare external communications for review and issue them only after authorisation.
• Support cross-border personal data transfer assessments, documenting requirements and safeguards and coordinating internal and regulatory approvals.

Required profile

• Bachelor's degree in Law, Risk Management, Information Security, Cybersecurity, IT, Computer Science or a related discipline.
• Relevant experience in data privacy, compliance, risk management, legal, information security or a related function, including assessments, compliance records and remediation coordination.
• Working knowledge of the PDPA and its implementing regulations.
• Desirable: a recognised privacy certification such as CIPP or equivalent.
• Strong written and spoken English and Kiswahili.

Required skills

• Proficiency in Microsoft Word and Excel for assessment records, registers and action trackers.
• Knowledge of ISO/IEC 27001 and NIST; familiarity with SOC 2, SOX, ITIL, COBIT and King IV is desirable.
• Ability to interpret privacy and regulatory requirements and turn them into practical business actions.

Candidates apply by sending their application letter, CV and copies of relevant certificates to the Human Resource Manager of TEF Consult, or through the online application form.