Brief Description
Reporting to the HOD – Customer Privacy, the mission of this role is to institutionalize data protection legislation and best practice in order to empower our customers to safeguard their data protection rights across Safaricom Plc.
The position holder will:
- Review and offer advice on data governance, processing activities and/or data breaches for Safaricom Plc
- Monitor compliance with applicable national and international laws and regulations pertaining to data protection and privacy
- Provide advice on the implementation of appropriate policies and guidelines to establish and maintain data protection compliance
- Contribute towards establishing a strong culture of data protection across stakeholders through carrying out appropriate training and awareness
Key Responsibilities
- Identify, evaluate and maintain records of Safaricom Plc’s data processing activities, in conjunction with subsidiary management as appropriate
- Provide advice and conduct Data Protection Impact Assessments (DPIAs) as required
- Monitor data management procedures and compliance within Safaricom Plc
- Share advice and guidelines for implementing privacy by design and privacy by default in all products and systems
- Ensure all queries from data subjects seeking to exercise their rights are responded to within required timeframes
- Update detailed guidelines via data protection policies as required Conduct annual training and awareness programmes for stakeholders
Qualifications
- Legal, business or IT security degree
- Privacy certifications such as CIPP/E and ISO 27701 an added advantage
