Manager of Freedom of Information, Data Protection & Complaints – Legal Advisory Division
Cayman Islands Monetary Authority
Grand Cayman · George Town · Full-time · KYD$111,939 - KYD$139,590 Per Annum (paid Monthly)
Reporting to the Head of Legal Advisory for administrative matters and to the Chief Counsel on matters relating to compliance and governance, the Manager of Freedom of Information, Data Protection, and Complaints has conduct of all requests received under the Freedom of Information Act (“FOIA”), manages data protection matters under the Data Protection Act (“DPA”), and handles complaints received by CIMA. The incumbent will liaise with internal Divisions and external stakeholders, particularly the Office of the Ombudsman (“Ombudsman”), ensure accurate logging, tracking, and the timely processing of FOIA requests and DPA matters, oversee the implementation of mitigation measures and recommendations in relation to personal data breach incidents, and process and monitor complaints received by CIMA to their logical conclusion. Critical thinking and problem-solving skills with effective communication, attention to detail, and knowledge of applicable legislation are essential.
RESPONSIBILITIES:
The successful candidate will:
• Provide independent, expert advice and guidance on all and most specifically on significantly sensitive FOI and DPA cases and complaint matters;
• Process requests for access to information under the FOIA and the DPA within the applicable timelines, including liaising internally to obtain the requested information, determining eligibility for access, communicating with the applicants, and preparing and issuing formal responses;
• Consult with the Ombudsman regarding appeals, investigations, orders, and reporting under the FOIA, as well as complaints, investigations, orders, breaches, and consultations under the DPA, in response to decisions made;
• Manage the accurate logging and tracking of FOI requests received by CIMA in the monitoring and tracking system used by Government;
• Develop and maintains internal policies, procedures, plans, notices, guidance and other required documentation relating to information management, data protection and complaints – incorporating statutory and other requirements and keeping these under continuous review to account for legislative amendments;
• Prepare and submit reports to the Chief Counsel, CEO and the Board with statistics and updates on FOI requests, data breach incidents, including the implementation of mitigation measures or recommendations from the Ombudsman, and complaints;
• Lead the preparation and review of reports required by the Ombudsman regarding FOI requests and related internal reviews and appeals;
• Coordinate and maintain publication schemes in accordance with guidelines developed under the FOIA;
• Hold staff accountable for results, efficiency, and completing work within deadlines as well as compliance requirements, adherence to CIMA’s policies, procedures, the Code of Conduct, goals and objectives;
• Direct supervisory and decision-making responsibility includes allocating and delegating work to direct reports, and prioritising and scheduling tasks;
• Assist with the recruitment of and the onboarding of new staff to support the FOI, Data Protection and Complaints functions including training;
• Build and maintain positive, cooperative relationships with various government departments, other statutory authorities and other external stakeholders; and
• Provide on-the-job training, mentoring, effective performance feedback, and identifies training and development needs as applicable.
REQUIREMENTS:
The minimum qualifications required to successfully perform the job are as follows:
• Certification or similar qualification in Public Administration, Information Management, Data Protection, Complaints Handling or a related field;
• Bachelor of Laws;
• Minimum of 6 years’ work experience as an information manager, handling FOI requests and in dealing with Data Protection issues and managing complaints within a regulatory, legal, or public sector environment;
• Demonstrated experience with managing and coordinating responses to complex data breaches, incl