Job Detail

Job Description

Madison Group Limited (“the Group”) is a financial services group. The Group offers life assurance, retirement benefits, general and healthcare insurance and investment management services in Kenya.

The position holder shall report to the Company Secretary.

The Role

The purpose of this role is to establish, implement, and enforce a robust group-wide Data Protection Compliance framework and systems to ensure the Group and its subsidiaries are compliant with the Data Protection Law and regulations. The job holder will be a member of the Data Protection Technical Committee (DPTC) responsible for implementing Information Risk and Data Protection programs with the Group.

Key Responsibilities

• Advise the Group and employees on data processing requirements provided under this Act or any other written law;
• Ensure on behalf of the Group, that the Data Protection Act is complied with;
• Facilitate capacity building of staff involved in data processing operations;
• Provide advice on data protection impact assessment;
• Co-operate with the Data Commissioner and any other authority on matters relating to data protection;
• Defining a Group Data Protection compliance program;
• Champion Data Protection compliance;
• Develop data protection implementation plan and strategies;
• Interpreting data in relation to data protection laws;
• Analyzing and classifying data on behalf of the Group;
• Identifying patterns and trends in data sets;
• Regularly Conduct Data Protection Impact Assessment;
• Implementing an effective compliance training program on data protection;
• Identify, analyze, and interpret trends or patterns in complex data sets;
• Coordinate Reporting of data breaches to data protection commissioner;
• Respond to all data protection queries on behalf of the Group;
• Issue and respond to any notice on data breach;
• Work with the Data Protection Committee to align data protection policies with the relevant laws;
• Work with management to prioritize business and information security needs;
• Identify and define new process improvement opportunities on data
  protection;
• Develop, monitor and update detailed data protection policies and
  procedures;
• Report on compliance gaps noted and ensure that the needed improvements
  are recommended;
• Work with legal team to ensure full compliance on all data protection laws;
• Promote a culture of data protection across all department of the organization.

Minimum Requirements

Qualifications, Experience and Personal Attributes

• Bachelor’s Degree in Law from a reputable institution;
• Knowledge on Data Protection Act & General Data Protection Regulations (GDPR) is an added advantage;
• Professional certification in privacy or Data Protection such as CIPP is an added advantage;
• Experience in risk management or compliance role, preferably within the
  insurance or banking industry.

Applications including copies of the latest CV should be addressed to the Group Human Resources Manager, Madison Group Limited, Email: hr_recruitment@madison.co.ke so as to be received by Saturday 29th October, 2022