Data Protection Officer

Organizational Background

The National Information Technology Authority-Uganda (NITA-U) was established as a statutory body under the National Information Technology Authority, Uganda Act, 2009. It functions as one of the key players in the Information and Communications Technology Sector, with a mandate to coordinate, promote, and monitor IT development within the context of national social and economic development. NITA-U envisions "Lives transformed through e-service delivery" and works diligently to drive digital transformation across all sectors of the Ugandan economy.

Employment Terms

As a responsible and equal-opportunity employer, NITA-U is committed to providing competitive employment terms to successful candidates who demonstrate the right qualifications, skills, competencies, and experiences. The organization offers a professional work environment that encourages growth, innovation, and excellence. Detailed job specifications, descriptions, and other relevant information can be found on the NITA-U official website at www.nita.go.ug.

Key Responsibilities

• Coordinate, promote, and monitor IT development within the context of national social and economic development, ensuring alignment with the Authority's strategic objectives.
• Develop, implement, and maintain comprehensive data protection policies, procedures, and frameworks in compliance with the Data Protection and Privacy Act, 2019.
• Conduct regular data protection impact assessments and audits to identify risks and recommend mitigation measures.
• Advise the organization and its staff on obligations under data protection laws, including handling data subject requests and breach notifications.
• Act as the primary point of contact for the Personal Data Protection Office and other regulatory authorities on all data protection matters.
• Deliver training and awareness programs to build a culture of data privacy and security across the organization.
• Monitor compliance with data protection standards, report on progress, and recommend continuous improvements.
• Liaise with internal and external stakeholders to ensure data processing activities are lawful, fair, and transparent.

Qualifications and Experience

• A Bachelor's degree in Law, Information Technology, Computer Science, Data Science, or a related field from a recognized university.
• A minimum of 12 months of relevant professional experience in data protection, privacy, information security, or a closely related discipline.
• Professional certification in data protection, such as CIPP, CIPM, or equivalent, is an added advantage.
• Demonstrated knowledge of Uganda's Data Protection and Privacy Act, 2019, and related regulations.
• Strong analytical, communication, and interpersonal skills, with the ability to work independently and as part of a team.

Work Hours

8 hours per day, Monday through Friday, with occasional requirements for extended hours to meet deadlines or address urgent data protection issues.

Job Application Procedure

Interested applicants who meet the job requirements and specifications, and who possess the right personal attributes, are invited to complete and submit their application. The application form can be downloaded from the NITA-U official website at https://www.nita.go.ug/job-applications/job-application-form. Applications must include a cover letter, a detailed curriculum vitae, certified copies of academic certificates and testimonials, and must specify daytime telephone contact, postal and email addresses of both the applicant and three professional referees.

Applications should be addressed and submitted to:

The Executive Director,
National Information Technology Authority – UGANDA (NITA-U),
Palm Courts, Plot 7A, Rotary Avenue (former Lugogo bypass),
P.O. Box 33151, Kampala-Uganda.

The deadline for applications is 29th May 2026, not later than 1700 hours local time. Only soft copy applications will be accepted. No application will be considered without a duly completed and signed standard application form as referenced above. Late or incomplete applications will not be entertained.