About the Job

Cazini is seeking a detail-oriented Data Protection Specialist to oversee data privacy compliance, safeguard sensitive information, and ensure adherence to data

Responsibilities

Develop, implement and maintain the organization's data protection and privacy policies in line with the Kenya Data Protection Act and GDPR
Conduct regular Data Protection Impact Assessments (DPIAs) for new and existing projects
Monitor compliance with data protection laws and internal policies across all departments
Act as the primary point of contact for the Office of the Data Protection Commissioner (ODPC) and other regulators
Investigate and respond to data breaches, incidents and subject access requests in a timely manner
Advise management and staff on data protection obligations, risks and best practices
Review and update data processing agreements, contracts and vendor arrangements for compliance
Design and deliver staff training and awareness programs on data protection and privacy
Maintain records of processing activities (ROPA) and data flow mappings
Collaborate with IT and Information Security teams to strengthen data protection controls
Conduct periodic audits and risk assessments of data handling practices
Stay updated on changes in data protection legislation and emerging privacy risks

Qualifications

Bachelor's degree in Law, Information Technology, Computer Science or a related field
Certification in Data Protection (e.g. CIPP, CIPM, CDPO) is an added advantage
Minimum 3-5 years' experience in a data protection, privacy or compliance role
Strong knowledge of the Kenya Data Protection Act, GDPR and other relevant privacy frameworks
Demonstrated experience conducting Privacy Impact Assessments and compliance audits
Excellent analytical, problem-solving and report-writing skills
Strong communication skills with the ability to explain complex legal/technical concepts to non-experts
High level of integrity and ability to handle confidential information
Familiarity with information security principles and risk management frameworks

Required Skills

Data Protection LawGDPRKenya Data Protection ActPrivacy Impact AssessmentsInformation SecurityRisk ManagementPolicy DevelopmentRegulatory Compliance

Benefits

Competitive salary commensurate with experience
Medical insurance cover
Professional development and certification support (e.g. CIPP/CIPM)
Paid annual leave
Pension/retirement benefits scheme
Flexible and supportive work environment
Opportunity to shape data protection strategy for a growing organization