Main Purpose of the Job
To administer Data Protection Act and carry out the due diligence processes to ensure adherence to the Act.
Core Accountabilities and Responsibilities
1. Provides guidance in implementation of policies, strategies and guidelines to enable compliance to the Data protection Act.
2. Coordinates and drives continuous evaluation, standardization and improvement of processes, procedures, strategies and solutions on the protection of personal data.
3. Guides in the assessment and alignment of policies, procedures and standards to ensure compliance with Data Protection Act.
4. Coordinates data flow storage.
5. Develops and maintains inventory and records of all data processing activities in the Bank.
6. Protects the rights and freedom of data subjects and thereby ensuring that they are not adversely affected by processing operations.
7. Assesses risks inherent in the processing of personal data within the Bank taking into account the nature, scope, context and purposes of processing operations.
8. Conducts impact assessments on the protection of data.
9. Addresses requests and complaints related to processing of personal data. Audits the operations in line with the data protection framework to identify areas for improvement.
10. Identifies areas of non-compliance and makes recommendation for remedial action.
11. Provides training on the Data Protection Act for the Bank employees.
12. Designs and disseminates publicity tools to educate and sensitize employees on data protection and the importance of adhering to its protocols.
13. Advises the Bank on its obligation related to processing personal data in compliance with the Data Protection Act.
14. Serves as the main point of contact for the Information and Data Protection Commission.
15. Prepares reports on matters related to processing of personal data for submission to the Commission or as may be directed to the relevant authorities.
16. Represents the Bank in for a discussing or engaging on matters of related data protection.
17. Prepares the budget for the data protection function and submits it to departmental head for incorporation into the departmental budget.
18. Implements initiatives to ensure prudency in utilization of the budget and its adherence to procurement plans.
Education: Degree in Law, Data Science, Information Technology, Enterprise Risk Management, Project Management or any other related field from a reputable institution. Data Protection and/or Privacy certification will be an added advantage.
Experience: At least four (4) years post qualification experience in a business environment handling personal data, data compliance, security of data, data processing or related field in government or parastatal.
Competencies: Data analytics
Technology savvy
Research and development
Innovation
Knowledge in data protection regulatory protocols