Data Protection Officer at Strathmore University

Basic job summary:

The job holder will ensure the effective management of the University data processes and subjects in compliance with the Data Protection Act, No. 24 of 2019.

Duties & Responsibilities:

• Act as point of contact with the office of the Data Protection Commissioner, other supervisory authorities, internal teams and other stakeholders including partners of the University;
• Establish the Data Protection framework and implementation plan;
• Drive implementation of essential elements of the Data Protection Act, such as; the principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches;
• Interface with data controllers and data subjects and sensitize them about their rights, obligations, and responsibilities;
• Provide regular status updates to management and draw immediate attention to any compliance risks and exposure to the applicable data protection rules;
• Collaborate with the Information Security function to maintain records of all data assets and exports, and maintain a data security Incident Management Plan to ensure timely remediation of incidents: including; impact assessments, security breach response, complaints, claims or notifications, and responding to subject access requests (SARs);
• Identify and evaluate the University’s data processing activities;
• Provide advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs);
• Monitor data management procedures and compliance within the University;
• Participate in meetings with managers to ensure privacy by design at all levels;
• Maintain records of processing operations;
• Ensure we address all queries from data subjects within legal timeframes (e.g. delete their information from our databases);
• Liaise with other organisations that process data on our behalf;
• Write and update detailed guides on data protection policies;
• Perform audits and determine whether we need to alter our procedures to comply with regulations;
• Offer consultation on how to deal with privacy breaches;
• Arrange for training on compliance for all stakeholders of the university including employees and students;
• Follow up with changes in law and issue recommendations to ensure compliance.

Minimum Academic Qualifications:

Academic Qualifications

• A Law degree from an accredited law school is required.
• Bachelor’s degree (or equivalent) in computer science or related field will be an added advantage.

Professional Certification and Training

• Hold at least one Data Protection or Privacy certification.

Work Experience

• Minimum of three (3) years within a compliance, legal, audit, or risk function.
• Work experience in data protection and legal compliance is a plus.

Competencies and Attributes

• Proficiency with software for preparing reports and presentations.
• Ability to handle confidential information.
• Ethical, with the ability to remain impartial and report all noncompliance.
• Organizational skills with attention to detail.
• Excellent communication skills.