CONTRACTUAL INFORMATION

Job title: Risk & Compliance Officer CST-I
Grade: Level 1
Type of Contract: Consultant
Unit: Risk and Compliance
Duty Station (City, Country): Addis Ababa, Ethiopia
Duration: Eleven Months

Number of Available Positions: One (01)

BACKGROUND AND PURPOSE OF THE ASSIGNMENT:

The Ethiopia Country Office (CO) is recruiting a Risk Officer to fill a new position that will be responsible for data protection and due diligence; the role will proactively review controls around data protection, ensure timely due diligence on all activities, and provide relevant training and oversight on the implementation of reassurance action plans. The Risk Officer will develop and implement data management procedures and tools to support end-to-end coordination, trend analysis, and recommendations for control-strengthening actions and manage all internal and external reporting requirements.

The successful candidate is a self-starter with experience in data management, case management, risk management, and compliance with a UN agency. The selected candidate will be onboarded for an 11-month appointment. Regular travel to WFP field offices is expected for this role.

KEY ACCOUNTABILITIES (not all-inclusive, within delegated authority):

1. Data Protection

• Conduct regular Privacy Impact Assessments to review risks associated with WFP’s data collection, management, and sharing practices.
• Review and analyze data across systems (SCOPE, CTM, CFM, COMET. LESS) and modalities/ activities (in-kind, CBT, SFP, social protection, nutrition, etc.)
• Develop data protection risk mitigation measures and monitor their implementation with respective units/offices.
• Using third-party data, identify learning needs for staff, partners, and third parties (monitors, FSPs, vendors); develop and roll out data privacy and protection training to all relevant stakeholders.
• Proactively review data-sharing needs across the operation and coordination and contribute to developing respective data-sharing agreements for the CO in consultation with Legal and partners.
• Contribute to regional and corporate data protection policies, guidance, and tools as appropriate based on best practices, lessons, and challenges from the Ethiopia operation.
• Support reconciliations of different risk activities, including integrated data like COMET and LESS, CBT reconciliations, and beneficiary data reconciliations for all activities.
• Support the development of donor proposals in relation to risk-based data management, reconciliation, custody, and review.

2. Due Diligence

• Ensure organizational and individual checks for all partners, vendors, and other third parties (except for staff recruitment) against the United Nations consolidated Sanctions List, USG sanctions lists, World Bank sanctions lists, and other donor partner sanctions lists. Prepare certification documentation as needed.
• Manage the implementation of spot checks for third parties, including NGOs, line ministries, or other entities, conducted by WFP or a third party.
• Ensure key partner and vendor performance data triangulated (strong interagency platform) to strengthen risk information sharing with Ethiopia CPs.
• Participate inRisk unit controls environment reviews and ensure adherence to polices and procures.
• Withthe Partnerships Unit, monitor WFP compliance against existing donor/grant level agreements.

3. Other Accountabilities

• Support the collection of feedback and data on risk performance and contribute potential new implementation approaches.
• Support the discussion with functional experts and risk management focal points on identifying trends and emerging issues; contribute to the preparation of guidance and/or checklists in conformity with WFP policies and rules on periodic risk and/or control assessments;
• Contribute to management accountability across functional units, including through the preparation of comprehensive reports summarizing the status of internal control compliance and key oversight themes, and using risk information (e.g., risk indicators, incidentreporting) to highlight areas out of risk appetite and contribute ideas on required actions in areas of risk and compliance vulnerability.
• Preparing training materials and delivering training to all stakeholders including third parties. Government counterparts and staff.

DESIRED EXPERIENCES FOR ENTRY INTO THE ROLE:

• Knowledge of governance, organizational structures, strategy, and major initiatives of international organizations.
• Experience in programme/project management.
• Experience in data management system, excellent knowledge of Excel, data interpretation, and review systems.
• Has led risk analysis and risk mitigation strategies development and/or implementation.
• Practical knowledge and experience in data reviews, internal control assessments, procedures, guideline development and review, fraud and corruption procedures, and loss management in humanitarian and development contexts, and a demonstrated capacity to deliver high-quality work and meet demanding timeframes independently.
• Has conducted monitoring and reporting activities and knows results hierarchy, performance metrics, and measurement.

Language:

Fluency in both oral and written communication in English.