Data Protection Officer at Old Mutual Kenya

JOB SUMMARY

The role holder will be responsible for ensuring that the UAP OM Group processes personal data of its staff, customers, providers or any other individuals (also referred to as data subjects) in compliance with the applicable data protection regulations in the region.

KEY TASKS AND RESPONSIBILITIES

The Incumbent will report to the Group Head of Compliance and will be responsible for:

1. Developing and maintaining a mapping of Data protection and privacy legislation in all UAPOM’s operating territories
2. Maintaining data protection policies and procedures.
3. Monitoring and ensuring compliance with the Data Protection laws and policies of the Group as outlined by the regulator.
4. Conducting training and awareness sessions to all EA Staff on Data Privacy requirements and obligations of the Group
5. Ensuring Data privacy policy availability by publishing on the Intranet for employees and independent contractors to access and providing it to all third parties who process personal information on UAPOM’s behalf or in terms of a contractual agreement with UAPOM.
6. Management of third party data protection risks
7. Ensuring Data Privacy Impact Assessments are undertaken in line with data privacy laws.
8. Driving implementation of essential elements of the DPA, such as the principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches.
9. Overseeing the maintenance of records required to demonstrate data protection compliance.
10. Review and update Data privacy policy for the Group as required.
11. Supporting data incident response and data breach notification procedures.
12. Providing updates on the Data Protection and Privacy compliance programme.
13. Regular reporting on Compliance as required
14. Any other Compliance related responsibilities as may be assigned from time to time.

SKILLS AND COMPETENCIES

1. Experience working in a financial and/or regulated industry.
2. Experience reviewing information systems related contracts
3. Self-driven individual able to take accountability for role delivery
4. Excellent writing and presentation skills.
5. Detail-oriented approach needed to recommend and implement improvements on a range of data privacy and data protection issues.

KNOWLEDGE & EXPERIENCE 

1. Well-developed, professional interpersonal skills; ability to interact effectively with people at all levels.
2. Ability to handle confidential and sensitive information with the appropriate discretion and ethics.
3. Experience in managing data incidents and breaches.
4. Good understanding of data processing operations, including information systems, data security and data protection needs of an institution

QUALIFICATIONS 

1. A Bachelor’s degree in ICT, Law, Business Administration or any other Business-related degree
2. 5 years’ experience within ICT, legal, audit and/or risk function handling company data.
3. Hold at least one Data Protection and/or Privacy certification

Skills

Accountable, Contracts, Data Protection Laws, Design

Closing Date: 04 March 2022