SBM Bank Data Protection Officer Positions in Kenya
Job Purpose
The primary objective of this role is to establish and maintain the Bank’s Data governance framework, ensuring the proper handling of personal data of Bank staff, customers, service providers, or any other individuals (referred to as data subjects) in compliance with the Data Protection Act, 2019, and other applicable data protection rules.
Key Responsibilities
Reporting
- Prepare regular update reports on the Data Protection compliance program for the Chief Risk Officer and Management Committee.
- Support the Chief Risk Officer in preparing Board Update reports on Data Protection and Privacy compliance.
- Assist in data incident response and data breach notification procedures.
- Provide updates on matters related to compliance with statutory and regulatory requirements.
- Facilitate the provision of ad-hoc reports and information to regulators as required.
Knowledge: Skills and Experience required for this Role
- Minimum three (3) years of experience within ICT, legal, audit, and/or risk functions.
- Sound working knowledge of the Data Protection Act, 2019, and other relevant laws and regulations.
- Bachelor’s Degree.
- Experience in developing policies and compliance training.
- Experience in the financial and/or regulated industry, handling privacy company data.
- Reviewing financial institutions’ contracts with third parties.
- Understanding of data processing operations, including information systems, data security, and data protection needs.
- Experience in managing data incidents and breaches.
- Professional Data Protection and/or Privacy certification is an added advantage.
Competencies required for this Role
- Ability to work unsupervised, exercise leadership, and influence change.
- Excellent writing and presentation skills.
- Strong change and project management skills.
- Ability to manage time well, prioritize effectively, and handle multiple deadlines.
- Demonstrated ability to undertake large, long-term projects.
- Develop alternative methods to complete projects and implement solutions.
- Use independent judgment and discretion when making decisions.
- Detail-oriented approach needed for strategic improvements on data privacy and protection issues.
- Handle confidential and sensitive information with appropriate discretion and ethics.
- Leadership skills to lead a team and engage with management.
- Prepare and facilitate training as a Subject Matter Expert (SME).
- Planning and organizing.
- Learning and researching.
- Critical thinker with good analytical capabilities.
