Data Protection & Compliance Officer

ABOUT THE COMPANY Kenya Airways is the Africa's Leading Airline-Business in the World. JOB SUMMARY The role holder will support the Company Secretary & Director Legal & Compliance in establishing and maintaining a robust and effective compliance framework. The data protection and compliance officer will play a pivotal role in the implementation of the data protection framework which has been designed for the company and will ensure the effective management of Kenya Airways’ data processes and subjects in compliance with the Personal Data Protection Regulations of Kenya and. The company expects that the Data Protection & Compliance Officer will adopt the highest standards of compliance and governance in line with best practice, laws, regulatory and internal policy standards.QualificationsBachelor’s Degree in business, law or related fields.Qualifications in data protection would be beneficial but is not essentialMinimum 5 years of experience implementing controls.Experience implementing data protection guidelines is essential.Sound knowledge of Kenya Data Protection Regulations & is essential. RESPONSIBILITIES Compliance ManagementSupport implementation of a compliance management framework and a compliance system to ensure compliance with industry regulations and internal policies covering the global operation.Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control.Review compliance policies and procedures on a regular basis to ensure they comply with statutory and regulatory requirements.Implementation of the Data Protection FrameworkImplement a comprehensive enterprise-wide data protection program in line with essential elements of the Kenya Data Protection Regulations & such as principles of data processing, data subjects’ rights, by design, records of processing activities, security of processing, breach escalation & records management.Implement the draft data protection policies and contract templates to remediate existing gaps with regards to data protection in Kenya Airways processes and ensure alignment with global standards (e.g., ).Maintain records of all data assets and exports in conjunction with the relevant internal stakeholders.Identify and evaluate Kenya Airways’ data processing activities.Coordinate Data Protection Impact Assessments (DPIAs)Monitor data protection procedures and compliance within the Kenya Airway’s global operations.Data Breach Response PlanImplement a data breach response plan and coordinate the activities of the plan.Ensure timely remediation of incidents, including impact assessments, breach response, complaints management, claims or notifications, and responding to subject access requests (SARs).Maintain the personal data breach log of the company.Report data breaches to the Office of the Data protection commissioner of Kenya as provided for in the Data Protection Regulations as we as any other global structure