Summary
Date Posted: Friday, September 02, 2022 , Base Salary: Not Disclosed

JOB DETAILS:
Key Responsibilities
Data Protection & Compliance
• Evaluate the WV existing data protection framework and identify areas of non or partial compliance in accordance with the Data Protection Act 2019 including aligning the same to the General Data Protection Regulation (GDPR)
• Conduct regular data impact assessments to ensure compliance with data protection laws.
• Work with departmental heads in reviewing current process of data collection, use, storage, disclosure and otherwise processing of such personal or sensitive data, and advise on any matters in relation to data protection compliance including revisions to WVK internal procedures to integrate consent taking processes, procedures to manage risks, safeguards, security measures and mechanisms for protection of data.
• Work with the Operations Manager to identify third parties that WVK shares data with and ensure that they have processes in place for handling data and prevent unauthorized access, use or disclosure, and so promote a culture of data protection compliance with third parties.
• Take ownership of data protection documentation and reporting requirements, including records of processing activities, privacy notices, data protection impact assessments, data incident records and data breach reporting, and conduct periodic compliance assessments of these.

Staff Data Protection Education & Compliance
• Provide expert advice and educate employees on important data compliance requirements
• Hold training with staff members across different business units who are involved in data handling or processing
• Raise levels of awareness of data protection issues to all WVK staff regarding data compliance for those who are involved in processing sensitive and personal data by providing training and data protection advice and support.

Quality Assurance
• Ensure WV Data Protection & Compliance quality standards are maintained, which includes but is not limited to:
• Proactively conduct audits to ensure compliance and address potential issues
• Conduct regular data impact assessments to ensure compliance with data protection laws.
• Work collaboratively and proactively with the legal and compliance team in relation to data protection issues and review WVK contractual documents with clients, employees, suppliers third party service providers and other counterparties which process data and incorporate appropriate clauses to mitigate the risk of breaching data protection laws
• Developing incidence reporting systems

Other
• Perform any other duty as may be assigned by supervisor or designee from time to time
• Participate and contribute in committees and task forces as may be signed from time to time

Qualification & Skills
• Minimum 6 years' experience in data protection privacy policy, advocacy and implementation (INGO/IASC/PIM humanitarian data experience will be an added advantage)
• Expertise in data protection and compliance laws, rules, regulations, risks, specifically privacy and data protection laws, rules and regulations in East Africa
• Awareness of regulatory requirements including local, international and industry standards
• Knowledge and experience in data processing and managing areas relevant to privacy and data protection (information security; data governance; third party risk management; data encryption/decryption)
• Experience with digital security awareness topics and best practices, particularly cybersecurity
• Experience with remote facilitation and training
• Experience within a legal, audit and/or risk function department
• Strong project management skills
• Ability to work well under pressure and manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail
• Great interpersonal skills and ability to work well both independently and as part of a team
• Excellent analytic and computer skills
• The position holder should have a Bachelor’s Degree in any of the following fields: Computer Science, Information Communication Technology, Informatics, Law, Statistics or their equivalent from a recognized and accredited institution;
• Post-graduate Diploma or Master’s Degree in any of the following fields: Information Communication Technology Policy and Regulation, Computer Science, Data Science, Project Management, Monitoring & Evaluation, Public Policy, Information Systems, Informatics, Law, Public Administration or equivalent qualifications from a recognized and accredited institution;
• Technical data strategy and protection certification standard such as protection information management (PIM), AWS data pipeline engineering, or certified information systems auditor (CISA) is an added advantage.
• Ability to engage at a strategic level with Office of Data Protection Commissioner officials.
• Strong budgetary and financial management skills.
• The person must be results oriented, able to handle public relations, and a team player.
• Good interpersonal, organizational and management skills.
• Ability to maintain performance expectations in diverse cultural contexts, and physical hardship conditions.
• Ability to solve complex problems and to exercise independent judgment.

Work Hours: 8

Experience in Months: 72

Level of Education: Postgraduate Degree

Job application procedure
• Interested and qualified? Click here to apply

All Jobs

QUICK ALERT SUBSCRIPTION