Data Protection & Privacy Officer Job in Kenya at Sidian Bank

Why This Role Matters

This Data Protection & Privacy Officer role allows professionals to develop key skills in Banking / Finance / Accounting / Audit. The position offers career growth opportunities while supporting the company's mission and values.

Responsibilities for Data Protection & Privacy Officer in Kenya

• The Data Protection & Privacy Officer plays a critical role in ensuring the Bank’s personal data is managed in full compliance with applicable data protection laws, including the Kenya Data Protection Act and guidance from the Office of the Data Protection Commissioner. Under Data Protection Compliance, the officer supports the implementation and day-to-day operation of the Bank’s Data Protection & Privacy Framework. They assist the Data Protection Officer (DPO) in ensuring ongoing compliance, maintaining up-to-date policies, standards, procedures, and guidelines that reflect both regulatory requirements and internal operational needs.
• In Data Inventory & Mapping, the officer maintains the Bank’s Register of Processing Activities (RoPA) and coordinates periodic data mapping exercises across all systems, business units, and third-party vendors. This ensures that data flows are accurately documented, sensitive information is appropriately classified, and retention schedules are adhered to. The officer ensures records are disposed of securely and in accordance with both regulatory and internal requirements, reducing risk of non-compliance or unauthorized access.
• Under Privacy Impact Assessments, the officer conducts and documents Data Protection Impact Assessments (DPIAs) for new products, system enhancements, and outsourcing arrangements. They track the implementation of mitigation measures to address identified privacy risks and ensure that projects incorporate Privacy by Design and Privacy by Default principles from inception.
• In Data Subject Rights Management, the officer coordinates responses to requests for data access, correction, deletion, and objections. They ensure statutory timelines and documentation standards are strictly met and maintain evidence repositories suitable for audits and regulatory review.
• Through Monitoring & Assurance, the officer continuously monitors adherence to privacy policies, consent management procedures, and cross-border data transfer controls. They support internal audits, regulatory inspections, and privacy compliance assessments, including third-party risk evaluations, tracking remediation, and ensuring timely closure of identified issues.
• In Training & Awareness, the officer delivers data protection training, provides guidance to business units on secure handling of personal data, and conducts research on emerging privacy trends and regulatory developments.
• Under Incident Management, the officer assists in investigating, documenting, and reporting data breaches and privacy incidents. They support both internal reporting and regulatory notifications where required, ensuring transparency, accountability, and continuous improvement in the Bank’s data protection practices.
• Overall, this role strengthens the Bank’s privacy governance framework, ensures compliance with legal and regulatory obligations, and fosters a culture of accountability and secure handling of personal data across the organization.

Qualifications for Data Protection & Privacy Officer in Kenya

• Degree

How to Apply for Data Protection & Privacy Officer in Kenya

Interested candidates should submit their updated CV and cover letter clearly indicating “Data Protection & Privacy Officer” as the subject of the application. Applications should be sent through the Bank’s official recruitment portal or designated HR email address before the stated deadline. Only shortlisted candidates will be contacted.