Privacy Specialist

About the role

The Privacy Specialist will lead the implementation of privacy policy controls across the organisation and its subsidiaries. You will ensure that all products, services and operational processes comply with data protection regulations before launch and throughout their lifecycle.

Key responsibilities

• Conduct Privacy Impact Assessments (PIA) for new and existing products, services and processes.
• Re‑assess high, medium and low risk offerings on a periodic basis.
• Implement Security and Privacy by Design and Assurance (SPDA) principles.
• Prepare and submit cross‑border data transfer permit applications to the Personal Data Protection Commission (PDPC) with all required documentation.
• Maintain trackers for PIAs, DPIAs and transfer applications, monitoring completion status and risk levels.
• Oversee the implementation of all privacy controls required under the Privacy Management Policy.
• Channel ad‑hoc data analytics and testing requests to the Privacy team for assessment and approval.
• Ensure the Personal Data Processing Register (PDPR) is up‑to‑date.
• Respond promptly to internal and external privacy‑related queries.
• Perform any other duties assigned by the company.

Required profile

• Bachelor’s degree in Telecommunications, Information/Cyber Security, IT or Computer Science; a law degree or diploma is an advantage.
• Strong knowledge of information technology and data protection concepts.
• Excellent interpersonal, communication and customer‑oriented skills, fluent in English and Kiswahili.
• Familiarity with compliance frameworks such as ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, King IV and NIST.
• Experience working on complex technical projects is a plus.
• Self‑motivated, integrity‑driven, culturally sensitive and able to convey technical information to non‑technical stakeholders.

Required skills

• Microsoft Word
• Microsoft Excel
• ISO/IEC 27001
• SOC 2
• SOX
• ITIL
• COBIT
• King IV
• NIST