Job Objective

The job holder will ensure compliance and data practices internally to ensure the University and its functions comply with the requirements of the Kenyan Data Protection Act, 2019, its attendant regulations, and other relevant national legislation.

Responsibilities or duties

• Assist in conducting Data Protection Impact Assessments (DPIAs) and compliance audits to ensure adherence to the Data Protection Act, 2019.
• Support the development, review, and updating of data protection policies, procedures, and privacy notices.
• Monitor and document data processing activities across university departments to identify compliance gaps and associated risks.
• Assist in handling data subject rights requests, including access, rectification, and erasure of personal data.
• Participate in training and awareness campaigns on data privacy, information security, and compliance best practices.
• Research emerging data protection laws, regulations, and best practices to support continuous improvement
• Assist in reviewing third-party data processing agreements and ensuring vendors comply with data protection obligations.
• Support incident response activities, including data breach reporting and mitigation measures.
• Maintain accurate records of data protection activities and generate reports for the Data Protection Officer.
• Perform any other duties related to data protection and compliance as assigned by the Data Protection Officer.

Qualifications And Experience

• Bachelor’s degree in ICT or its equivalent from an accredited/recognised Institution.
• One (1) year of relevant work experience in a University or in a comparable Institution.
• Data protection and/or privacy certification, such as CIPP, CIPM, CIPT, CDPSE, etc., will be an added advantage.

Other Skills And Competencies

• Proficient in the use of word processors, spreadsheets, presentations, and database management software.
• Knowledge of data security and privacy tools.
• Strong change and project management skills
• Well-developed report writing skills for preparing compliance documentation and audit reports.
• Exceptional communication and interpersonal skills, with the ability to engage stakeholders at all levels.

• Assist in conducting Data Protection Impact Assessments (DPIAs) and compliance audits to ensure adherence to the Data Protection Act, 2019.
• Support the development, review, and updating of data protection policies, procedures, and privacy notices.
• Monitor and document data processing activities across university departments to identify compliance gaps and associated risks.
• Assist in handling data subject rights requests, including access, rectification, and erasure of personal data.
• Participate in training and awareness campaigns on data privacy, information security, and compliance best practices.
• Research emerging data protection laws, regulations, and best practices to support continuous improvement
• Assist in reviewing third-party data processing agreements and ensuring vendors comply with data protection obligations.
• Support incident response activities, including data breach reporting and mitigation measures.
• Maintain accurate records of data protection activities and generate reports for the Data Protection Officer.
• Perform any other duties related to data protection and compliance as assigned by the Data Protection Officer.

• Proficient in the use of word processors, spreadsheets, presentations, and database management software.
• Knowledge of data security and privacy tools.
• Strong change and project management skills
• Well-developed report writing skills for preparing compliance documentation and audit reports.
• Exceptional communication and interpersonal skills, with the ability to engage stakeholders at all levels.

• Bachelor’s degree in ICT or its equivalent from an accredited/recognised Institution.
• One (1) year of relevant work experience in a University or in a comparable Institution.
• Data protection and/or privacy certification, such as CIPP, CIPM, CIPT, CDPSE, etc., will be an added advantage.