Data Protection Officer Job CIB Nairobi, Kenya

Job Purpose Statement

• The Data Protection Officer (DPO) is responsible for ensuring the Bank’s adherence to the Data Protection Act, 2019, and respective regulations. The DPO oversees the implementation and maintenance of data protection policies, conducts compliance assessment s, manages data protection documentation, and acts as the primary contact for all data protection matters within the Bank.

Key Responsibilities

Financial

• Implementing data protection measures to avoid financial penalties and fines associated with non-compliance with data protection laws.
• Ensure that data breaches are prevented, saving the Bank from potential financial losses related to data breach notifications, legal fees, and compensation claims.
• Overseeing contracts with third -party service providers to ensure they comply with data protection regulations, thereby avoiding financial risks related to third -party breaches or non – compliance.
• Conducting data protection impact assessments (DPIAs) to identify and mitigate potential financial risks associated with data processing activities.
• Managing insurance policies related to data protection and cyber liability to ensure the Bank is financially protected against potential data breaches or cyber incidents.

Customer

• Act as the key contact person to data subjects by informing them about how their personal
• data is being used and what measures the Bank has put in place to protect their data.
• Offer consultation on how to deal with privacy breaches.

Internal Business Process

• Align the Bank’s processes, policies, and contracts with the Data Protection Act, 2019, and respective regulations.
• Conduct a Bank-wide gap analysis on compliance with the Data Protection Act, 2019, and respective regulations.
• Oversee the development and review of policies, procedures, and guidelines to facilitate compliance with data protection laws and regulations.
• Act as the custodian of data protection documentation and reporting requirements, including records of processing activities, data protection impact assessments, data incident records, and data breach reporting.
• Evaluate the existing data protection framework, identify areas of non -compliance, and rectify any issues.
• Conduct regular assessments to ensure the Bank’s compliance with the Data Protection Act, 2019, and respective regulations.
• Identify and evaluate the Bank’s data processing activities, maintaining an updated data processing inventory.

Functional Responsibilities

• Serve as the primary point of contact within the Bank for staff, regulators, and relevant data protection authorities.
• Act as the expert in data protection, providing information and creating awareness across the Bank on data protection matters.
• Advise staff on data protection compliance issues and data subject access requests.
• Work collaboratively and proactively with the legal and compliance team on data protection issues.
• Inform and advise the Data Controller or Data Processor on all matters related to data protection

Job Specification

Academic

• Bachelor’s degree in Law, Information Technology, or a related field.
• Professional Qualifications & Experience
• Proficiency in Microsoft Office Suite
• Certification in Data Protection or Privacy Law (e.g., CIPP/E, CIPM) is preferred.

Desired Work Experience

• Minimum of 5 years of experience in data protection, compliance, or a related field.
• Proven experience in a regulatory environment, preferably within the banking or financial sector.

How to Apply

To apply, please send your applications to – recruitment@cibke.com  with the subject being – the title of the job.