Principal Officer – Data Protection at Safaricom Kenya

DESCRIPTION

We are pleased to announce the following vacancy Principal Officer – Data Protection within Customer Privacy Department in Corporate Security Division. In keeping with our current business needs, we are looking for a person who meets the criteria indicated below.

Brief Posting Description

Reporting to HOD – Customer Privacy, the position holder will Mission: Proactively engage regulators and other stakeholders in order to embed tailored, timely data privacy capabilities across Safaricom Plc. Independently review and offer advice on data governance, processing activities and/or data breaches for Safaricom Plc. Monitor compliance with applicable national and international laws and regulations pertaining to data protection and privacy and work with teams to close gaps identified. Proactively support all efforts towards Regulator engagement, registration, breach notification and reporting. Provide appropriate policies and guidelines to establish and maintain data protection compliance. Contribute towards establishing a strong culture of data protection across stakeholders through appropriate training and awareness

Job Responsibilities

1. Identify, evaluate and maintain records of Safaricom Plc’s data processing activities, in conjunction with subsidiary management as appropriate
2.  Provide advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs)
3. Monitor data management procedures and compliance within Safaricom Plc
4. Provide advice and guidelines for implementing privacy by design and privacy by default in all products and systems
5. Work with teams across the business to close gaps identified within committed timelines
6. Ensure all queries from data subjects seeking to exercise their rights are responded to within required timeframes
7. Provide and update detailed guidelines via data protection policies and define required contractual provisions to enforce data sharing obligations
8. Conduct annual training and awareness programmes for all stakeholders 

QUALIFICATIONS

1. Degree in Business, Legal or IT Security from a recognized University
2. 4 years’ experience in data protection privacy policy, advocacy and implementation
3. Privacy certifications such as CIPP/E and ISO 27701 an added advantage