Data Protection Specialist

About the role

We are seeking a Data Protection Specialist to join the Legal department of ER Management Services Limited, supporting the ER Group. Reporting to the Group Data Protection Officer, the role will provide guidance on data protection laws, ensure regulatory compliance, and assist in the execution of the DPO’s responsibilities.

Key responsibilities

• Provide legal advice on data protection laws and regulations applicable to the Group’s activities.
• Interpret and apply data protection requirements in day‑to‑day operations.
• Monitor compliance and implement data protection frameworks.
• Develop and maintain policies, procedures, and registers.
• Lead the implementation and continuous improvement of the Group’s data protection compliance programme.
• Conduct risk assessments and identify compliance gaps.
• Act as the primary contact for data protection queries across the Group.
• Design and deliver training sessions on data protection and digital legal topics.
• Draft, review, and negotiate contracts involving personal data, such as data processing agreements.
• Support the Group DPO in handling personal data breaches and managing data subject rights.
• Provide legal input on digital and data‑related projects.

Required profile

• Minimum 2 years of experience in data protection, cybersecurity, compliance or a related field.
• Practical knowledge of GDPR, CCPA and the Mauritius Data Protection Act.
• Strong understanding of data governance, risk management and privacy‑by‑design principles.
• Familiarity with contract and commercial law as it relates to data protection.
• Excellent analytical, communication and stakeholder‑management abilities.
• Ability to translate complex regulations into practical business advice.
• Proactive, organised, detail‑oriented and solution‑focused.

Required skills

• Knowledge of GDPR, CCPA and the Mauritius Data Protection Act.
• Understanding of data governance, risk management and privacy‑by‑design.
• Experience with drafting and negotiating data‑related contracts.