Data Protection Specialist

About the role

We are seeking a Data Protection Specialist to join the Legal department of ER Management Services Limited. Reporting to the Group Data Protection Officer, you will provide legal guidance on data protection, support regulatory compliance, and help drive the Group’s privacy programme.

Key responsibilities

• Provide legal advice on data protection laws and regulations applicable to the Group’s activities.
• Interpret and apply data protection requirements in day‑to‑day operations.
• Monitor compliance and implement data protection frameworks.
• Develop and maintain policies, procedures, and registers.
• Lead the implementation and continuous improvement of the Group’s data protection compliance programme.
• Conduct risk assessments, identify compliance gaps and recommend remediation.
• Act as the primary point of contact for data protection queries across the Group.
• Design and deliver training sessions on data protection and digital legal topics.
• Draft, review and negotiate contracts involving personal data, such as data processing agreements.
• Support the Group DPO in handling personal data breaches and managing data subject rights.
• Provide legal input on digital and data‑related projects.

Required profile

• Minimum 2 years of experience in data protection, cybersecurity, compliance or a related field.
• Practical knowledge of GDPR, CCPA and the Mauritius Data Protection Act.
• Strong understanding of data governance, risk management and privacy‑by‑design principles.
• Familiarity with contract and commercial law as it relates to data protection.
• Excellent analytical, communication and stakeholder‑management abilities.
• Ability to translate complex regulations into practical business advice.
• Proactive, organised, detail‑oriented and solution‑focused.

Required skills

• Knowledge of GDPR, CCPA and the Mauritius Data Protection Act.
• Understanding of data governance, risk management and privacy‑by‑design.
• Familiarity with contract law related to personal data processing.
• Experience conducting privacy impact assessments and risk analyses.