Deputy Data Commissioner, Data Protection Compliance at Office of the Data Protection Commissioner

PARALEGAL DEPUTY DATA COMMISSIONER – DATA PROTECTION COMPLIANCE, ODPC 2, ONE (1) POST – V/NO. 1/2022

Terms and Conditions of Services

• Basic salary Kshs. 251,121 – 326,458 PM
• House Allowance Kshs. 60,000 PM
• Commuter Allowance Kshs. 20,000 PM
• Leave Allowance Kshs. 30,000 PA
• Annual Leave 30 Working days per Financial Year
• Medical Cover and other allowances As provided by the ODPC
• Terms of service Three (3) year contract renewable once

Requirements for Appointment

• For appointment to this grade, an officer must have:
• Seven (7) years’ experience in a related field, three (3) of which should be at senior management level;
• Bachelor’s Degree in any of the following fields: Computer Science, Information
• Communication Technology, Informatics, Law or their equivalent from a
• recognized and accredited institution;
• Master’s Degree in any of the following fields: Computer Science, Information
• Communication Technology, Data Science, Information Systems, Informatics,
• Law, or equivalent qualifications from a recognized and accredited institution;
• Certificate in Systems Audit from a recognized and accredited institution;
• Certificate in Leadership Development Course from a recognized and accredited
• institution;
• Membership with relevant professional body of good standing;
• Shown merit and ability as reflected in work performance.

Duties and Responsibilities

• Specific duties and responsibilities at this level will entail:
• Oversee the development and review of policies, procedures and guidelines to inform Data Protection Compliance;
• Registration of Data Controllers and Data Processors in accordance with Data Protection Laws;
• Certification of Data Controllers and Data Processors in accordance with the

Data Protection Laws;

• Establishment and Maintenance of a register of Data Controllers and Data Processors;
• Oversight Personal Data Processing Operations in compliance with Data Protection Laws;
• Conduct periodic audits of the process and systems of Data Controllers and Data Processors to ensure Compliance;
• Review and advice on Data Protection Impact Assessment Reports in accordance with Section 31 of the Data Protection Act, 2019;
• Oversee Inspections of Data Controllers and Data Processors on processing of personal data;
• Ensure compliance in relation to transfer of personal data outside the country in accordance with the Data Protection Laws;
• Determine the Administrative fines to be imposed for failure to comply with the Data Protection Laws;
• Provide advice to the Data Commissioner and implementation of inspection and compliance recommendations;
• Serve as the Chair of the Data Protection Compliance and Enforcement Committee;
• Perform any other duties as may be assigned by the Data Commissioner.

Core Competencies
The following core competencies and skills will be required

• Leadership skills;
• Management skills;
• Presentation skills;
• Communications and Negotiation skills;
• Resource mobilization and management capabilities;
• Analytical skills;
• Decision making capabilities;
• People and Knowledge management;
• Creativity and innovativeness.