International Humanitarian Law and Data Protection Officer at Kenya Red Cross Society

Job Purpose

• To support the implementation of Kenya Red Cross Society’s mandate in International Humanitarian Law (IHL), protection of the Red Cross emblem and institutional compliance with data protection legislation. The Officer will undertake research, provide routine technical guidance, coordinate awareness activities, maintain compliance systems and support the resolution of IHL, emblem and data protection matters under the supervision of the Head of Department.

Main Duties and Responsibilities
International Humanitarian Law and Emblem Protection

• Conduct dissemination and awareness activities on IHL for KRCS staff, volunteers, members and other relevant audiences.
• Undertake research and prepare initial legal briefs, advisory notes, presentations and summaries on IHL and related humanitarian legal matters.
• Monitor relevant legislative, policy and institutional developments and identify matters requiring further review by the Head of Department.
• Support engagement with Government institutions, academic institutions, security agencies, Movement partners and other stakeholders on the promotion and implementation of IHL.
• Receive, assess and manage routine cases involving misuse of the Red Cross emblem and designation, escalating complex or persistent cases for further action.
• Provide routine guidance to KRCS departments, branches and partners on the correct use of the KRCS name, logo and protected emblems.
• Maintain systems and registers for monitoring emblem use and misuse and prepare periodic reports on identified cases and action taken.
• Support the organisation and delivery of IHL meetings, conferences, training programmes and other related activities.

Data Protection

• Support correspondence, submissions, registration requirements and other Support implementation of the KRCS data protection framework in accordance with the Data Protection Act, applicable regulations and approved institutional policies.
• Provide routine guidance to departments, branches and programmes on the appropriate collection, use, storage, sharing, retention and disposal of personal data.
• Conduct preliminary compliance reviews and assist departments to identify and address gaps in their handling of personal data.
• Maintain data protection records and registers, including records of processing activities, data-subject requests, reported breaches and compliance actions.
• Receive and coordinate data-subject requests and complaints, ensuring that they are recorded, referred and addressed within the applicable timelines.
• Conduct preliminary assessments of reported or suspected personal data breaches, preserve relevant documentation and promptly escalate incidents requiring management or regulatory action.
• Support the preparation and review of privacy notices, consent forms, data-collection tools, data-sharing agreements and contractual data protection clauses.
• Assist departments to undertake Data Protection Impact Assessments for programmes, technologies or activities that may present significant privacy risks.
• Support data protection training and awareness programmes for staff, volunteers, governance members and other relevant stakeholders.
• Monitor compliance with approved data protection policies and prepare periodic reports identifying risks, recurring issues and recommended corrective actions.
• engagements with the Office of the Data Protection Commissioner.

General Responsibilities

• Prepare reports, briefings and presentations on activities undertaken and matters requiring management attention.
• Attend relevant internal and external meetings and follow up agreed actions.
• Maintain confidentiality and ensure secure handling of legal, personal and other sensitive information.
• Perform any other related duties assigned by the supervisor.

Compliance and Risk Management

• Ensure adherence to financial policies, procedures and internal controls.
• Support implementation of audit recommendations.
• Monitor compliance with donor and statutory requirements.
• Support periodic asset verification exercises.
• Identify and report financial and operational risks.

Qualifications and Experience

• Bachelor’s degree in Law from a recognised university.
• At least two years’ relevant experience in legal services, compliance, data protection, humanitarian affairs or a related field.
• Demonstrable understanding of International Humanitarian Law and Kenya’s data protection framework.
• Professional training or certification in data protection or IHL will be an added advantage.
• Admission as an Advocate of the High Court of Kenya will be an added advantage.

Key Competencies

• Legal research, analysis and drafting.
• Ability to interpret legal requirements and provide practical guidance.
• Good judgement and ability to identify matters requiring escalation.
• Strong planning, coordination and record-management skills.
• High level of integrity, discretion and confidentiality.
• Strong communication, training and stakeholder-engagement skills.
• Attention to detail and ability to manage competing assignments.
• Ability to work independently on routine matters and collaboratively on complex assignments.