Job particulars
- Job title
- Data Protection Analyst
- Hiring organisation
- s Expand Recruitment Services
- Location
- Nairobi, Kenya
- Employment type
- Full-time
- Work arrangement
- On-site
- Industry
- IT
- Level
- Middle
- Experience
- 4+ years
- Posted
- 27 Oct 2026
- Closing date
- 3 Nov 2026
Key responsibilities
- Data Protection Governance & Framework.
- Support the implementation and maintenance of the Bank’s Data Protection & Privacy Framework.
- Assist in maintaining records of processing activities (ROPAs) across departments.
- Support the documentation, review, and update of data protection policies, procedures, and standards.
- Assist business units in implementing privacy by design and privacy by default principles in processes and systems.
- Maintain registers relating to personal data processing activities and data inventories.
- Technical Data Protection Controls.
- Assist in the implementation, configuration, and maintenance of technical data protection solutions such as Data Loss Prevention (DLP).
- Support monitoring of data access controls, privilege management, and authentication safeguards.
- Work with IT and vendors to support the management of DLP technologies and privacy-related security tools.
- Assist in identifying and reporting potential data protection control weaknesses.
- Support implementation of technical safeguards protecting personal and sensitive data.
- Risk management & DPIAs.
- Assist in conducting Data Protection Impact Assessments (DPIAs) for new systems, products, and operational changes.
- Support data mapping exercises and documentation of data flows.
- Assist in identifying privacy risks and documenting mitigation controls.
- Maintain registers of DPIAs, high-risk processing activities, and remediation actions.
- Support privacy risk assessments for projects and third-party engagements.
- Data Subject Rights & Incidents Management.
- Support the administration of data subject rights requests including access, rectification, erasure, and restriction requests.
- Assist in tracking and coordinating responses to data subject access requests (DSARs).
- Support the investigation and documentation of personal data breaches and privacy incidents.
- Assist in maintaining records of personal data breaches and incident responses.
- Support escalation of incidents to the Senior Data Protection Officer where required.
- Training, Awareness, and Culture.
- Support delivery of data protection awareness initiatives and staff training programs.
- Assist in preparing internal privacy communications, newsletters, and guidance materials.
- Research emerging privacy regulations, regulatory guidance, and global data protection trends.
- Support awareness campaigns promoting responsible handling of personal data.
- Provide operational support to business units on data protection queries.
Candidate requirements
- Minimum 2–4 years’ experience in data protection, information security, IT risk, compliance, or data governance roles.
- Experience supporting Data Loss Prevention (DLP) or related information security technologies.
- Experience supporting information security compliance and data governance processes.
- Exposure to banking systems, digital banking platforms, or regulated financial services environments is an added advantage.
- Experience supporting audits, compliance assessments, or risk reviews.
- Technical Competencies.
- Data Protection & Privacy Governance.
- Privacy Risk Assessment & DPIAs.
- Data-Breach & Incident Management.
- Digital Banking & Data-Driven Technology Risk.
- Third-Party & Cross-Border Data Risk.
- Information Security & Privacy Controls.
- Data Governance & Records Management.
Ready to apply?
Start ApplicationCandidate safety
Never pay an employer or recruiter for a job offer. Review the application instructions after signing in and report suspicious vacancies to Kebarick.
Hiring organisation
s Expand Recruitment Services