Junior Data Protection Auditor

About the role

This entry‑level position offers the chance to work alongside senior auditors on real client engagements, gaining hands‑on experience with Zambia's Data Protection Act No. 3 of 2021 and the ODPC auditor framework. You will develop core audit skills while contributing to compliance projects for a growing privacy‑focused firm.

Key responsibilities

• Assist senior auditors in planning and executing annual and ad‑hoc data protection audits.
• Collect, organise, and verify audit evidence such as policies, system configurations, and processing records.
• Support assessments of compliance with the Data Protection Act, including consent practices and data‑subject rights mechanisms.
• Document findings and draft sections of audit reports under supervision.
• Review privacy notices, data processing agreements, and internal procedures for adequacy.
• Help promote data‑protection awareness during client engagements.
• Stay updated on ODPC guidance, local regulations, and international best practices.
• Assist in preparing submissions for ODPC reporting requirements.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or a related field.
• 1‑3 years of professional or internship experience in data protection, IT auditing, cybersecurity or compliance.
• Current or pending membership with the ICT Association of Zambia (ICTAZ).
• Basic understanding of data‑protection principles and familiarity with the Data Protection Act No. 3 of 2021.

Required skills

• Proficiency with Microsoft Word.
• Proficiency with Microsoft Excel.
• Foundational knowledge of information‑security concepts such as access controls, encryption and incident management.
• Ability to review policy documents and identify gaps.