Role purpose:
- Privacy Specialist is responsible for providing day to day effective implementation of Privacy Policy Controls in the company and its subsidiaries.
Key accountabilities:
- Ensure completion of Privacy Impact Assessment (PIA) across all products, services, and operations development processes across the business before launch.
- Assessments & re-assessments of existing high, medium & low risk products and processes from time to time
- Implementation of Security and Privacy by Design and Assurance (SPDA)
- Keep track, ensure, and maintain the status of implementation of all privacy controls required under the Privacy Management Policy.
- Ensure all ad-hoc data for analytics and testing requests from the business are channelled to Privacy team for assessments (PIA) and approval.
- Ensure Implementation of Personal Data Processing Register (PDPR)
- Ensure timely response to operational privacy related queries and communications received across the business both internal and external.
- Carrying out any other duties as may be assigned by the Company.
Qualification, Core competencies, knowledge and working experience:
- Strong Educational Background in a field of Telecommunications, Information/Cyber Security/ Information technology /Computer Science/Data Protection.
- At least 1 year experience in Privacy and Data Protection
- Outstanding ability to apply knowledge of Information Technology
- High level of computer literacy exceptionally conversant with Word and Excel
- Excellent interpersonal skills and customer and business-oriented approach
- Strong communication skills, fluency in English and Kiswahili and ability to interact with other team members.
- Knowledge of common technology management / compliance frameworks such as ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, King IV and NIST.
- Experience in working on complex technical projects will an added advantage.
- A reputation for self-motivation, integrity, cultural sensitivity, and strong interpersonal skills
- Ability to communicate complex technical information to non-technical business units.