Data Protection Officer at KCA University (KCAU)

JOB OBJECTIVE

The job holder will be responsible for ensuring the effective management of the University data processes and subjects in compliance with the Data Protection Act, No. 24 of 2019.

DUTIES AND RESPONSIBILITIES:

• Establish the Data Protection framework and implementation plan.
• Develop policies and templates for data processing.
• Guide departments on implementing the Data Privacy requirements and supporting them to ensure compliance with the Data Protection Act.
• Create and maintain a register on all data processing activities.
• Train stakeholders involved in data processing and update training requirements.
• Conduct reviews to ensure compliance and accountability and proactively address potential issues.
• Ensure that IT systems and procedures comply with all relevant data privacy and protection regulations.
• Support the University in the preparation of privacy statements for data processing
• Ensure compliance on all company forms and/or literature, websites and other communication or data collection mediums.
• In liaison with the Information Security function, maintain records of all data assets and exports.
• Maintain a data security incident management plan for timely remediation of incidents.
• Create an e-Data base for data protection
• Serve as the point of contact between the University and the Regulatory Authorities.
• Interfacing with data controllers and data subjects and sensitising them about their rights, obligations and responsibilities.
• Provide regular status updates to management and draw immediate attention to any compliance risks and/or exposure to the applicable data protection rules.

QUALIFICATIONS AND EXPERIENCE

• A Bachelor’s degree in ICT, Law, Business Administration or any other Business-related degree from an accredited university.
• 5 years’ experience within ICT, legal, audit and/or risk function handling company data.
• Hold at least one Data Protection and/or Privacy certification

OTHER SKILLS AND COMPETENCIES

• Demonstrated an understanding of Data processing operations as provided in the Data Protection Act no. 24 of 2019
• Well-developed IT skills;
• Excellent research skills;
• Well-developed report writing skills;
• Exceptional communication and interpersonal skills