Summary: Thuto SACCOS is a member-owned Savings and Credit Cooperative Society committed to delivering secure, innovative, and member-focused financial service...

Job Details

  • Deadline: 2026-07-31
  • Location: Gaborone
  • Employment Type: contract

Job Description

Thuto SACCOS is a member-owned Savings and Credit Cooperative Society committed to delivering secure, innovative, and member-focused financial services. To strengthen its governance and regulatory compliance framework, the Society invites applications from suitably qualified and experienced individuals for the position of Data Protection Officer, on a 3-5 years fixed term contract.

Job Summary

Type

contract

Location

Gaborone

Category

Information Technology

Closing Date

2026-07-31

Key Responsibilities

Reporting to the Risk and Compliance Manager, ensure that the Society complies with the Data Protection Act and all applicable data protection and privacy regulations.

Develop and oversee data protection policies.

Promote a culture of privacy.

Monitor compliance.

Serve as the primary liaison and point of contact with regulatory and supervisory authorities on data protection matters.

Ensure personal information is processed securely and in accordance with approved policies and legislation.

Monitor developments in data protection laws and recommend appropriate policy and procedural changes.

Develop, implement, and maintain the Society’s data protection policies, procedures, and privacy framework.

Conduct regular compliance audits and reviews of data processing activities.

Coordinate and oversee Data Protection Impact Assessments (DPIAs) where required.

Identify, assess, and mitigate data privacy risks across the Society.

Develop incident response procedures for data breaches and oversee investigations and reporting.

Monitor the implementation of appropriate data security and privacy controls.

Design and deliver staff awareness programmes on data protection and privacy obligations.

Promote a culture of data privacy and compliance throughout the Society.

Develop educational materials and guidance for employees.

Manage requests relating to access, correction, deletion, restriction, and other rights of data subjects.

Ensure all requests and complaints are handled within statutory timelines and legal requirements.

Maintain accurate records of processing activities.

Ensure data processing agreements with third parties comply with applicable legal requirements.

Prepare compliance reports for Management and regulators.

Collaborate with Management and Information Technology teams to strengthen data governance and information security.

Coordinate communication with regulatory authorities regarding compliance matters and breach notifications.

Represent the Society on matters relating to data protection compliance.

Requirements

A Bachelor’s Degree in Law, Information Technology, Business Administration, Information Security, or a related field.

A minimum of three (3) years’ experience in data protection, privacy, information governance, compliance, or information security.

Demonstrated knowledge of the Data Protection Act and internationally recognised data protection principles and best practices.

Experience in developing and implementing data protection policies and compliance programmes.

Strong analytical, investigative, and problem-solving skills.

Excellent communication, report writing, and stakeholder engagement skills.

High standards of integrity, confidentiality, and professionalism.

Experience within the financial services sector, particularly a Savings and Credit Cooperative Society (SACCOS), banking, insurance, or other regulated financial institution, will be an added advantage.

Professional certification in Data Protection, Privacy, Information Security, or Compliance (such as CIPP, CIPM, CDPSE, ISO 27001 Lead Implementer/ Auditor, or equivalent) will be an added advantage.

Knowledge of Data Protection and Privacy Laws

Compliance and Regulatory Management

Risk Assessment

Information Governance

Policy Development and Implementation

Analytical and Critical Thinking

Communication and Influencing Skills

Planning and Organising

Confidentiality and Ethical Conduct

Attention to Detail

Salary

Attractive and competitive remuneration package

How to Apply

Apply by email

recruitment@thutosaccos.co.bw

Address: PO BOX 45821, RIVERWALK, GABORONE

REF Code

Circular No. 2 of 2026

Vacancy Circular No

About the Company

Thuto SACCOS Limited is a cooperative financial institution deeply rooted in Botswana, structured to serve its members. Operating as a member-owned entity, it delivers crucial financial services to support the economic well-being of its constituents. Eligibility for membership is specifically extended to employees working for the Government of Botswana and various Parastatals across the nation. This targeted approach ensures that Thuto SACCOS effectively caters to the distinct financial needs of Botswana's public sector workforce.

A cooperative financial institution for Botswana's public sector employees.

Website

https://www.thutosaccos.co.bw/

View all jobs at this company →

Frequently Asked Questions

What are the typical qualifications, certifications, or education needed to become a Data Protection Officer (DPO) in Botswana, especially for a financial institution

A degree in Law, Information Technology, or Business Administration is generally required, often coupled with relevant experience in compliance or legal fields. Certifications such as CIPP/E, CIPM, or local data privacy training programs are highly advantageous and demonstrate specialized knowledge of data protection principles. Familiarity with the Botswana Data Protection Act is crucial.

What are the common day-to-day responsibilities of a DPO in a SACCOS like THUTO, given it's a contract role

Day-to-day responsibilities include advising management on data protection compliance, conducting privacy impact assessments, and responding to data subject requests. You would also monitor internal data processing activities, develop data protection policies, and provide staff training to ensure adherence to privacy best practices. Regular reporting on compliance status is also expected.

What are the typical work culture and expectations for a DPO in Botswana, particularly within the financial sector

The work culture emphasizes professionalism, strict adherence to regulatory guidelines, and strong ethical conduct, especially within Botswana's financial sector. A DPO is expected to be diligent, proactive, and capable of working autonomously while collaborating effectively with various departments to embed privacy by design principles. Building trust and ensuring confidentiality are paramount.

What are realistic career progression or growth paths for a Data Protection Officer in Botswana after completing a contract role

A DPO can progress into senior compliance management, information security leadership roles, or specialize as a privacy consultant across different industries. Continuous professional development, staying updated on evolving data protection laws, and networking within regulatory and legal communities are key for career advancement. Opportunities often arise in larger financial institutions, telecommunications, or government sectors.

What typical benefits (like leave, medical aid, pension) can a DPO expect for a contract role in Botswana

Contract roles in Botswana typically include statutory leave provisions as mandated by labor laws. However, benefits such as medical aid and pension contributions are less common for short-term or defined-period contracts compared to permanent positions. Specific benefit inclusions will be clearly outlined in your individual contract agreement.

How should one apply for a DPO role in Botswana, and what do employers generally look for in candidates

Employers in Botswana typically look for candidates with a thorough understanding of the Botswana Data Protection Act, practical experience in implementing data privacy frameworks, and strong analytical skills. Your application should highlight relevant project experience, certifications, and proven communication abilities, particularly in translating legal requirements into practical business solutions. A well-structured CV and cover letter tailored to the role are essential.

How to Apply

Apply by email: recruitment@thutosaccos.co.bw