Data Protection Officer at Nairobi Hospital

REF: TNH/HRD/DPO/11/2022

Reporting to the Head of Risk & Compliance, the successful candidate will be responsible for implementing and enforcing Hospital wide data protection compliance framework and systems to ensure the Hospital is compliant with the Data protection laws and regulations.

ROLES AND RESPONSIBILITIES

• Act as the primary point of contact within the Hospital for members of staff, regulators, and any relevant public bodies on issues related to data protection.
• Advise the Hospital and employees on data processing requirements provided under this Act or any other written laws.
• Establishing a Data Protection framework and implementation plan, amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders including developing templates for data collection and assisting with data mapping.
• Support the Hospital in preparation of privacy statements for each processing operation, and ensuring processes are put in place to ensure that the privacy statement is provided to data subjects on all Hospital forms and/or literature, websites and other communication or data collection mediums. Work with legal team to ensure full compliance on all data protection laws.
• Providing quarterly status updates to senior and middle management and drawing immediate attention to any failure to comply with the applicable data protection rules.
• Any other responsibilities that may be assigned to the job holder by the supervisor from time to time.

EDUCATION AND EXPERIENCE

• Law degree from an accredited law school or Bachelor of Science in Computer Science or an equivalent of the two.
• Certified Information Systems Auditor (CISA) certification/ Certified Information Systems Security Professional (CISSP)/ Certified Information Security Manager (CISM) certification
• Have carried out at least one Data Protection Impact Assessment exercise
• Minimum of three years’ experience working in a data protection compliance or a related field
• Strong project management skills
• Ability to work well under pressure and manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail
• Great interpersonal skills and ability to work well both independently and as part of a team

CORE COMPETENCIES

• Ability to provide legal advice and opinions
• Negotiation skills
• Drafting skills
• Communication skills
• Interpersonal skills
• Keen on learning new skills
• Team working skills
• Judgement and decision-making skills
• Planning and organising skills
• Integrity
• Confidentialit