Data Protection Officer
We currently have an exciting career opportunity for a Data Protection Officer within Jubilee Life Insurance Limited. The position holder will report to the Head of Risk & Compliance and will be based at our Head Office in Nairobi.
Job Title: Data Protection Officer
Company: Jubilee Life Insurance Limited
Location: Head Office, Nairobi
Reporting to: Head of Risk & Compliance
About Jubilee Insurance
Established in August 1937, Jubilee Insurance is the first locally incorporated insurance company in East Africa. Headquartered in Kenya, Jubilee has grown to become the region’s largest composite insurer, offering Life, Pensions, General, and Medical Insurance solutions.
With over 1.9 million clients and a presence in Kenya, Uganda, Tanzania, Burundi, and Mauritius, Jubilee Insurance is the number one insurer in East Africa. The Group is the only ISO-certified insurance company listed on all three East African stock exchanges:
- Nairobi Securities Exchange (NSE)
- Dar es Salaam Stock Exchange (DSE)
- Uganda Securities Exchange (USE)
Jubilee’s regional operations are highly rated for leadership, quality, and risk management, holding AA- ratings in Kenya and Uganda, and A+ in Tanzania.
More information: www.JubileeInsurance.com
Position Overview
Jubilee Life Insurance Limited is seeking a highly competent and experienced Data Protection Officer (DPO) to strengthen its data governance and privacy framework. The successful candidate will be responsible for ensuring compliance with data protection laws, safeguarding customer and corporate data, and embedding a strong data protection culture across the organization.
Key Responsibilities
- Ensure compliance with the Data Protection Act, 2019 and other applicable data privacy regulations.
- Develop, implement, and monitor data protection policies, procedures, and controls.
- Advise management and staff on data protection obligations and best practices.
- Conduct data protection impact assessments (DPIAs) for new systems and processes.
- Monitor, investigate, and report data breaches and coordinate remediation actions.
- Act as the primary liaison with the Office of the Data Protection Commissioner (ODPC).
- Oversee data subject access requests and ensure timely responses.
- Conduct training and awareness programs on data protection and privacy.
Key Requirements
- Bachelor’s degree in Law, Information Technology, Risk Management, Compliance, or a related field.
- Professional certification in Data Protection, Privacy, Information Security, or Compliance (e.g. CIPP, CIPM, CDPO) is an added advantage.
- Proven experience in data protection, compliance, risk management, or information security.
- Strong knowledge of data protection laws and regulatory requirements.
- Excellent analytical, communication, and stakeholder management skills.
- High levels of integrity and professionalism.
