Data Protection Officer at Madison Group Limited

The Role

The purpose of this role is to establish, implement, and enforce a robust group-wide Data Protection Compliance framework and systems to ensure the Group and its subsidiaries are compliant with the Data Protection Law and regulations. The job holder will be a member of the Data Protection Technical Committee (DPTC) responsible for implementing Information Risk and Data Protection programs with the Group.

Key Responsibilities

• Advise the Group and employees on data processing requirements provided under this Act or any other written law;
• Ensure on behalf of the Group, that the Data Protection Act is complied with;
• Facilitate capacity building of staff involved in data processing operations;
• Provide advice on data protection impact assessment;
• Co-operate with the Data Commissioner and any other authority on matters relating to data protection;
• Defining a Group Data Protection compliance program;
• Champion Data Protection compliance;
• Develop data protection implementation plan and strategies;
• Interpreting data in relation to data protection laws;
• Analyzing and classifying data on behalf of the Group;
• Identifying patterns and trends in data sets;
• Regularly Conduct Data Protection Impact Assessment;
• Implementing an effective compliance training program on data protection;
• Identify, analyze, and interpret trends or patterns in complex data sets;
• Coordinate Reporting of data breaches to data protection commissioner;
• Respond to all data protection queries on behalf of the Group;
• Issue and respond to any notice on data breach;
• Work with the Data Protection Committee to align data protection policies with the relevant laws;
• Work with management to prioritize business and information security needs;
• Identify and define new process improvement opportunities on data
  protection;
• Develop, monitor and update detailed data protection policies and
  procedures;
• Report on compliance gaps noted and ensure that the needed improvements
  are recommended;
• Work with legal team to ensure full compliance on all data protection laws;
• Promote a culture of data protection across all department of the organization.

Qualifications, Experience and Personal Attributes

• Bachelor’s Degree in Law from a reputable institution;
• Knowledge on Data Protection Act & General Data Protection Regulations (GDPR) is an added advantage;
• Professional certification in privacy or Data Protection such as CIPP is an added advantage;
• Experience in risk management or compliance role, preferably within the
  insurance or banking industry.