Our client is one of the banks in the market. They are looking for a Data Protection Officer for their Nairobi branch. The Data Protection Officer will be reporting to the Head of Enterprise Risk. H/She will be responsible for ensuring the Bank’s adherence to the Data Protection Act, 2019, and respective regulations. The DPO will oversee the implementation and maintenance of data protection policies, conduct compliance assessments, manage data protection documentation, and act as the primary contact for all data protection matters within the Bank.
Key Responsibilities:
Financial
- Implementing data protection measures to avoid financial penalties and fines associated with non-compliance with data protection laws.
- Ensure that data breaches are prevented, saving the Bank from potential financial losses related to data breach notifications, legal fees, and compensation claims.
- Overseeing contracts with third-party service providers to ensure they comply with data protection regulations, thereby avoiding financial risks related to third-party breaches or non-compliance.
- Conducting data protection impact assessments (DPIAs) to identify and mitigate potential financial risks associated with data processing activities.
- Managing insurance policies related to data protection and cyber liability to ensure the Bank is financially protected against potential data breaches or cyber incidents.
Customer
- Act as the key contact person to data subjects by informing them about how their personal data is being used and what measures the Bank has put in place to protect their data.
- Offer consultation on how to deal with privacy breaches.
Internal Business Process
- Align the Bank’s processes, policies, and contracts with the Data Protection Act, 2019, and respective regulations.
- Conduct a Bank-wide gap analysis on compliance with the Data Protection Act, 2019, and respective regulations.
- Oversee the development and review of policies, procedures, and guidelines to facilitate compliance with data protection laws and regulations.
- Act as the custodian of data protection documentation and reporting requirements, including records of processing activities, data protection impact assessments, data incident records, and data breach reporting.
- Evaluate the existing data protection framework, identify areas of non-compliance, and rectify any issues.
- Conduct regular assessments to ensure the Bank’s compliance with the Data Protection Act, 2019, and respective regulations.
- Identify and evaluate the Bank’s data processing activities, maintaining an updated data processing inventory.
Functional responsibilities
- Serve as the primary point of contact within the Bank for staff, regulators, and relevant data protection authorities.
- Act as the expert in data protection, providing information and creating awareness across the Bank on data protection matters.
- Advise staff on data protection compliance issues and data subject access requests.
- Work collaboratively and proactively with the legal and compliance team on data protection issues.
- Inform and advise the Data Controller or Data Processor on all matters related to data protection.
Job Specification
Academic
- Bachelor’s degree in Law, Information Technology, or a related field.
Professional Qualifications & Experience
- Proficiency in Microsoft Office Suite
- Certification in Data Protection or Privacy Law (e.g., CIPP/E, CIPM) is preferred.
Desired Work Experience
- Minimum of 5 years of experience in data protection, compliance, or a related field.
- Proven experience in a regulatory environment, preferably within the banking or financial sector.
Job Competencies: Technical Competence
Knowledge of Data Protection Laws: In-depth understanding of the Data Protection Act, 2019, and respective regulations.
Data Protection Frameworks: Expertise in implementing and maintaining data protection policies and procedures.
Compliance Assessments: Ability to conduct gap analyses and regular compliance assessments.
Documentation Management: Proficiency in managing data protection documentation and reporting.
Advisory Skills: Capability to advise on data protection impact assessments and data breach responses.
Data Processing Oversight: Understanding and maintaining data processing activities and inventory.
Job Competencies: Behavioral Competence
Communication Skills: Ability to effectively inform and advise staff and data subjects on data protection matters.
Attention to Detail: Ensures accurate records and thorough compliance assessments.
Proactivity: Identifies and addresses data protection issues promptly.
Collaboration: Works effectively with various teams within the Bank.
Ethical Standards: Demonstrates a strong ethical attitude towards data protection and privacy.
Remuneration/Benefits:
A competitive salary is on offer, based on skills, qualifications and experience.
To apply, please send your updated CV in word format to info@epafrica.co.ke. Kindly indicate the role you are applying for in the subject line of the email. Please note that only short-listed candidates will be contacted.