Key Job Functions

Undertake privacy program remediation activities, conduct data audits to ensure compliance and provide advice on the impact of data protection efforts.
Conduct Data Protection Impact Assessments (DPIAs) and undertake the assessments in line with data privacy laws.
Identify areas of non or partial compliance with privacy law and rectify any issues.
Support implementation of essential elements of the Data Protection legislation, such as the principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches.
Review company’s policies in accordance with Data Protection Regulation and codes of practice.
Maintain comprehensive records of all data processing activities conducted by the company, including the purposes of all processing activities.
Develop guidelines and templates clauses and contracts for management of various stakeholders and relationships relating to processing of personally identifiable information.
Raise awareness, devise internal communications and training plans and provide data protection advice and support for members of staff.
Develop and execute external communication plan for privacy awareness for third parties and partners.
Support in management and administration of privacy software and data incident response and data breach notification procedures.
Monitor industry best practice and trends for privacy and consumer protection to keep training material relevant and up to date.
Identify and leverage opportunities to continually improve the quality of data privacy systems, processes and standards.
Promote a culture of data protection compliance across all units of the organization and suppliers involved in processing personal data.
Support special projects for the company, including but not limited to privacy certification, audits, new market expansion, legal & privacy compliance.
Assist with data privacy and consumer protection related due diligence, queries for transactions and from stakeholders.

EXPERIENCE/ EDUCATION REQUIRED

Minimum of three (3) years’ experience working in data protection or privacy compliance or a related field.
Bachelor of Laws LLB required (Ghana or Zambia qualified an added advantage).
Have carried out Data Protection Impact Assessments.
Good understanding of data processing operations, including information systems, data security and data protection needs.
Knowledge on Data Protection laws across M-KOPA markets or Managed data protection issues for different jurisdictions added advantage.
Privacy Related Professional certification (CIPP, CIPT, PECB IEC/ISO 27001, 27701 Implementer or Auditor) an added advantage.

SKILLS & COMPETENCIES

Excellent verbal and written communication skills, with ability to communicate in plain and simplified English.
Strong attention to detail.
Great interpersonal skills and ability to work well both independently and as part of a team.
Ability to manage time well, prioritize effectively, and handle multiple deadlines

Data Privacy Legal Counsel