SBM Bank (Kenya) Limited is a leading financial institution committed to excellence in banking services and compliance with all regulatory requirements. As part of our dedication to data privacy and protection, we are seeking a highly skilled and experienced Data Protection Officer to join our Risk Department.
This role is based at our Head Office under an open-ended contract. If you are passionate about data privacy, regulatory compliance, and creating a culture of protection by design, we encourage you to apply.
Position: Data Protection Officer
Department: Risk
Reports To: Chief Risk Officer
Band/Level: Manager
Location: Head Office
Contract Terms: Open-Ended
Application Deadline: January 20, 2025
Job Summary
The Data Protection Officer will establish and maintain SBM Bank’s data governance framework, ensuring the personal data of employees, customers, service providers, and other stakeholders is handled in compliance with the Data Protection Act, 2019 and other applicable laws.
The successful candidate will also guide the organization in embedding a culture of data protection by design and by default while serving as the primary point of contact for all data protection matters.
Key Responsibilities
1. Leadership and Stakeholder Management (30%)
- Develop and maintain relationships with the Office of the Data Protection Commissioner (ODPC), regulators, and key stakeholders.
- Assist and guide staff and management in responding to inquiries or requests from regulators and data subjects.
- Organize and participate in training and awareness programs on data protection and privacy requirements for staff.
- Promote a culture of data protection by design and by default within the bank.
2. Oversight Compliance with Data Protection & Privacy Requirements (50%)
- Develop, review, and maintain data protection policies and procedures.
- Serve as the primary point of contact for staff, regulators, and the public on data protection issues.
- Map and document data processing points across all bank operations.
- Manage third-party data protection risks, including ensuring contractors comply with the Bank’s data protection policies.
- Oversee compliance with the Data Protection Act, 2019, maintaining records to demonstrate adherence.
- Monitor evolving laws and regulations, updating policies and procedures accordingly.
- Provide advice and supervision on responses to data subjects’ requests and complaints.
- Oversee the availability of data protection policies for employees, independent contractors, and third parties.
3. Reporting (20%)
- Prepare regular updates on the data protection compliance program for the Chief Risk Officer and management committees.
- Support the preparation of board reports on data protection compliance.
- Provide updates on compliance with statutory and regulatory requirements.
- Support incident response and data breach notification processes.
- Facilitate the provision of ad hoc reports to regulators as required.
Key Relationships
Direct Reports
- Data Protection & Privacy Compliance Champions (Indirect).
Internal Stakeholders
- Board Risk Committee (BRC).
- Executive Management Committee (EXCO).
- Operational Risk Committee (ORCO).
- ICT, Legal, HR, and other departments.
- Branch Managers and Heads of Departments.
Key Competencies & Qualifications
Knowledge, Skills, and Experience
- Minimum of three years of experience in ICT, legal, audit, or risk management functions.
- Sound knowledge of the Data Protection Act, 2019 and related regulations.
- Proven experience in developing policies and delivering compliance training.
- Hands-on experience in a regulated industry, particularly in handling data privacy in financial institutions.
- Familiarity with reviewing contracts involving data processing.
- Strong understanding of data processing operations, information systems, and data security needs.
- Demonstrated ability to manage data incidents and breaches.
Competencies
- Ability to lead a team and influence organizational change.
- Exceptional writing and presentation skills.
- Strong project management skills, with the ability to prioritize effectively.
- Strategic thinking and problem-solving abilities.
- Capacity to handle confidential and sensitive information with integrity.
- Strong leadership qualities and ability to conduct training as a Subject Matter Expert (SME).
- Critical thinking and analytical skills for data protection challenges.
Professional Certifications
- Data Protection and/or Privacy certifications will be an added advantage.
Why Join SBM Bank?
At SBM Bank, we are committed to fostering a work environment that values innovation, professionalism, and compliance. Joining our team as a Data Protection Officer means playing a pivotal role in ensuring trust and privacy for our stakeholders while working in a dynamic and supportive environment.
How to Apply
If you are a highly motivated individual with the skills and experience outlined above, we invite you to apply.
Apply Now
Send your CV and a cover letter detailing your qualifications and suitability for the position to [email protected]. Ensure your subject line includes the position title: Data Protection Officer.
Application Deadline: January 20, 2025
Additional Information
- Equal Opportunity Employer: SBM Bank is an equal opportunity employer, encouraging applications from all qualified individuals regardless of gender, ethnicity, or disability.
- No Fees: SBM Bank does not charge any fees for job applications or recruitment processes.
- Consent for Background Checks: By applying, you consent to necessary background checks as part of the recruitment process.
- Disqualification: Any form of canvassing will lead to automatic disqualification.
Take the next step in your career and join SBM Bank as a Data Protection Officer to ensure the highest standards of data governance and privacy compliance!
