Data Protection Officer at Commercial International Bank CIB Kenya in Nairobi, Kenya

    Commercial International Bank CIB Kenya logo

    Data Protection Officer

    Commercial International Bank CIB KenyaNairobi, Kenya

    Posted

    6 days ago

    Apply by

    28 Aug

    Full Time
    On Site
    Senior
    Banking, Insurance & Financial Services
    Data, Analytics & AI

    Build your CV in minutes! Tailored for the Kenyan job market.

    Build My CV

    Job Description

    The Data Protection Officer (DPO) is responsible for ensuring the Bank's adherence to the Data Protection Act, 2019, and respective regulations. The DPO oversees the implementation and maintenance of data protection policies, conducts compliance assessments, manages data protection documentation, and acts as the primary contact for all data protection matters within the Bank.

    Key Responsibilities

    • Implementing data protection measures to avoid financial penalties and fines associated with non-compliance with data protection laws.
    • Ensure that data breaches are prevented, saving the Bank from potential financial losses related to data breach notifications, legal fees, and compensation claims.
    • Overseeing contracts with third-party service providers to ensure they comply with data protection regulations, thereby avoiding financial risks related to third-party breaches or non-compliance.
    • Conducting data protection impact assessments (DPIAs) to identify and mitigate potential financial risks associated with data processing activities.
    • Managing insurance policies related to data protection and cyber liability to ensure the Bank is financially protected against potential data breaches or cyber incidents.
    • Act as the key contact person to data subjects by informing them about how their personal data is being used and what measures the Bank has put in place to protect their data.
    • Offer consultation on how to deal with privacy breaches.
    • Align the Bank's processes, policies, and contracts with the Data Protection Act, 2019, and respective regulations.
    • Conduct a Bank-wide gap analysis on compliance with the Data Protection Act, 2019, and respective regulations.
    • Oversee the development and review of policies, procedures, and guidelines to facilitate compliance with data protection laws and regulations.
    • Act as the custodian of data protection documentation and reporting requirements, including records of processing activities, data protection impact assessments, data incident records, and data breach reporting.
    • Evaluate the existing data protection framework, identify areas of non-compliance, and rectify any issues.
    • Conduct regular assessments to ensure the Bank's compliance with the Data Protection Act, 2019, and respective regulations.
    • Identify and evaluate the Bank's data processing activities, maintaining an updated data processing inventory.
    • Serve as the primary point of contact within the Bank for staff, regulators, and relevant data protection authorities.
    • Act as the expert in data protection, providing information and creating awareness across the Bank on data protection matters.
    • Advise staff on data protection compliance issues and data subject access requests.
    • Work collaboratively and proactively with the legal and compliance team on data protection issues.
    • Inform and advise the Data Controller or Data Processor on all matters related to data protection.

    Required Qualifications

    • Bachelor's degree in Law, Information Technology, or a related field.
    • Proficiency in Microsoft Office Suite.
    • Certification in Data Protection or Privacy Law e.g., CIPP/E, CIPM is preferred.
    • Minimum of 5 years of experience in data protection, compliance, or a related field.
    • Proven experience in a regulatory environment, preferably within the banking or financial sector.

    Job Details

    Job Function

    Data, Analytics & AI

    Minimum Experience

    5 years

    Education Level

    Bachelor’s Degree

    Area of Study

    Law

    Field of Study

    Law

    Additional Information

    How to Apply: Send your application to the provided email or visit the application link on this page.

    Show Your Data Protection Muscle in the Banking Context

    This role sits at the intersection of law, IT, and banking. Hiring managers will probe how you've operationalized data protection in a regulated environment, not just your knowledge of the Act.

    1. Map your experience to the banking sector: Highlight any prior work in financial services or other highly regulated sectors. Emphasize your understanding of the Data Protection Act, 2019, and how you've applied it in practice.

    2. Prove your certification edge: If you hold CIPP/E, CIPM, or similar, make it prominent. If not, show a clear plan to obtain it and demonstrate equivalent knowledge.

    3. Show your DPIA and breach management skills: Provide concrete examples of DPIAs you've conducted or breach response plans you've executed. Quantify outcomes where possible.

    4. Demonstrate stakeholder communication: As the primary contact for data subjects and regulators, you'll need to explain complex issues clearly. Prepare examples of how you've advised senior management or handled data subject requests.

    5. Highlight your policy development experience: Show that you can draft and review policies, procedures, and guidelines. Bring samples or a portfolio of documents you've created.

    6. Show your analytical side: The role involves gap analysis and compliance assessments. Describe how you've conducted such reviews and the tools you used.

    7. Understand the banking regulatory landscape: Familiarize yourself with CBK regulations and how they intersect with data protection. Mention any relevant training or reading you've done.

    8. Prepare for scenario questions: Expect questions like 'What would you do if a data breach occurred?' or 'How do you handle a data subject access request?' Practice structured responses that show your process.

    CareerSasa Safety Alert: Never pay employers or agencies for interviews, training, or job placement. Does a job request payment? Report it immediately using the "Flag" button. While CareerSasa vets job postings thoroughly, always verify opportunities independently.
    Share this job:

    Boost Your Application Success

    1. 1

      Expert CV help that gets you noticed. Build Your CV

    2. 2

      A personalized cover letter for this role. Write Cover Letter

    3. 3

      Attract recruiters with a stronger profile. Boost LinkedIn

    Tags

    data protection
    compliance
    GDPR
    DPO
    banking