The Privacy Specialist (Contractor Assignment) position is open in Dar es Salaam, Tanzania. Tanzania Empowerment Forum Limited (TEF Consult) is recruiting on behalf of its client for a temporary Privacy Specialist to join the Legal, Risk & Compliance function (Legal Affairs). The successful candidate will support data protection compliance under the Tanzania Personal Data Protection Act (PDPA) and will report to the Senior Privacy Specialist.

Job Summary

• Position: Privacy Specialist – Contractor Assignment
• Function: Legal, Risk & Compliance
• Sub-function: Legal Affairs
• Reports to: Senior Privacy Specialist
• Location: Dar es Salaam, Tanzania
• Employment type: Temporary contractor assignment
• Direct reports: None

About the Privacy Specialist Role

The Privacy Specialist will support the day-to-day implementation, monitoring and maintenance of privacy controls across the Company and its relevant subsidiaries within the assigned remit, under the supervision of the Senior Privacy Specialist.

The role supports privacy assessments, coordinates compliance activities, maintains accurate privacy records and escalates identified risks through the applicable governance and approval processes. It is a practical, hands-on data protection role suited to a candidate who can turn privacy requirements into clear actions for business and technology teams.

Key Responsibilities

1. Privacy Impact Assessments (PIAs)

• Coordinate and conduct Privacy Impact Assessments (PIAs) for new or materially changed products, services, systems and processing activities, in line with applicable policy requirements and before launch where required.
• Track mitigation actions and escalate outstanding material risks to the Senior Privacy Specialist for resolution through the applicable approval process.

2. Risk-Based Assessments and Reassessments

• Conduct risk-based assessments and reassessments of existing products and processes according to the agreed review schedule.
• Carry out further reviews where changes in processing activities or identified risks require it.

3. Security and Privacy by Design and Assurance (SPDA)

• Support the implementation of Security and Privacy by Design and Assurance (SPDA).
• Work with business and technology teams to identify, document and monitor the required privacy and security controls.

4. Privacy Controls Monitoring and Reporting

• Maintain records of the implementation status of privacy controls required under the Privacy Management Policy.
• Follow up with responsible business owners and report outstanding actions and identified gaps.

5. Personal Data Requests for Analytics and Testing

• Coordinate the referral of ad hoc requests involving personal data for analytics and testing to the Privacy team for assessment and approval before the proposed use takes place.

6. Personal Data Processing Register (PDPR)

• Maintain and update the Personal Data Processing Register (PDPR).
• Coordinate with business owners to obtain accurate and current information on processing activities.

7. Privacy Queries and External Communications

• Respond to routine operational privacy queries within agreed timelines and escalate complex or material matters to the Senior Privacy Specialist.
• Prepare external communications for review and issue them only after the required authorisation.

8. Cross-Border Personal Data Transfers

• Support cross-border personal data transfer assessments.
• Document the relevant requirements and safeguards, and coordinate the required internal and regulatory approval processes.

The Privacy Specialist will also perform other reasonable duties assigned by the Company that are consistent with the role, competence and scope of the temporary assignment.

Qualifications and Experience

Essential

• A bachelor’s degree in Law, Risk Management, Information Security, Cybersecurity, Information Technology, Computer Science or a related discipline.
• Relevant experience in data privacy, compliance, risk management, legal, information security or a related function, including practical experience supporting assessments, maintaining compliance records or coordinating remediation actions.
• Working knowledge of the Personal Data Protection Act (PDPA) and its implementing regulations.

Desirable

• A recognised professional certification in privacy or data protection, such as CIPP or an equivalent qualification.

Core Competencies and Skills

• Ability to interpret privacy, regulatory and policy requirements and translate them into practical business actions.
• Ability to apply information technology knowledge when assessing personal data processing activities and related controls.
• Proficiency in Microsoft Word and Excel, including maintaining assessment records, registers and action trackers.
• Strong interpersonal skills and a practical, business-oriented approach to privacy compliance.
• Strong written and verbal communication skills in English and Kiswahili, including the ability to explain complex privacy and technical matters to non-specialist stakeholders.
• Working knowledge of technology management, information security and compliance frameworks, including ISO/IEC 27001 and NIST. Familiarity with SOC 2, SOX, ITIL, COBIT and King IV is desirable.
• Experience supporting complex technical projects is an added advantage.
• Self-motivation, integrity, discretion and the ability to handle confidential information appropriately.
• Ability to manage competing priorities, maintain accurate records and escalate issues promptly.

Key Performance Indicators (KPIs)

• Assigned privacy assessments and reassessments completed to the required standard within agreed timelines.
• Assessment findings and mitigation actions accurately recorded, followed up and escalated within agreed timelines.
• The Personal Data Processing Register maintained and updated according to the agreed review schedule.
• Operational privacy queries addressed within agreed service timelines, with material or complex matters escalated appropriately.
• Privacy control status reports and supporting records maintained accurately and submitted on time.
• Specific targets and turnaround times will be agreed with the Senior Privacy Specialist, taking into account the scope and duration of the assignment.

Frequently Asked Questions

Where is the Privacy Specialist job located?

The role is based in Dar es Salaam, Tanzania.

Is this a permanent position?

No. This is a temporary contractor assignment reporting to the Senior Privacy Specialist.

What qualifications do I need?

A bachelor’s degree in Law, Risk Management, Information Security, Cybersecurity, IT, Computer Science or a related field, relevant privacy or compliance experience, and working knowledge of the Tanzania Personal Data Protection Act (PDPA). A CIPP or similar certification is an advantage.

Which languages are required?

Strong written and spoken English and Kiswahili.

How to Apply

Qualified and interested candidates should submit their application letter, CV and copies of relevant certificates as soon as possible to:

Human Resource Manager
Tanzania Empowerment Forum Limited (TEF Consult)
Email: info@tef.co.tz
P.O. Box 33542, Dar es Salaam, Tanzania

Or apply online using the application form on this page.