Reporting to the Data Protection Officer in Uganda and working as part of the Managing Director Department- Head Office. The position will among other functions provide first line compliance surveillance, guidance and management on Data Protection and Privacy processes and other relevant information in line with applicable laws, regulations, KCB Uganda and KCB Group policies and international standards. The jobholder will be responsible for managing the establishment of continuous dialogue, support and information on the Bank’s Compliance Universe, data protection and privacy compliance and other regulatory matters to which the Bank is licensed.

KEY RESPONSIBILITIES:

• In charge of the Bank’s regulatory compliance, monitoring and reporting to the Bank’s respective Regulators not limited to the Central Bank, Personal Data Protection Office (PDPO), National Information Technology Authority, etc.
• Develop and implement the Data Protection and Privacy strategy for the Bank and ensure that it is effectively cascaded across the different departments of the bank to drive awareness and alignment of the compliance agenda.
• Review and update the data protection and privacy policies and procedures.
• Review, interpret and train key stakeholders on the existing and emerging laws and regulations to ensure compliance with the law and regulatory bodies.
• Maintain and update the data protection and privacy risk self-control assessment
• Carryout products / services / data privacy impact assessments
• Conduct Vendor data Privacy Evaluations
• Advise Management about the data protection and privacy obligations of the Bank and monitor compliance with Data Protection Laws and Regulations.
• Ensure that controllers and data subjects are informed about their data protection rights, obligations and responsibilities and raise awareness about them
• Handle queries or complaints on request by the institution, the controller, other person(s), or on her own initiative.

DAILY RESPONSIBILITIES:

• Handle data protection and privacy queries or complaints
• Ensure that controllers and data subjects are informed about their data protection rights, obligations and responsibilities and raise awareness about them
• Support and provide data protection and privacy awareness and training across the network units.
• Report data protection and privacy breaches