Data Protection Internship

Join SBM Bank Kenya as a Data Protection Intern, based in Nairobi – an opportunity designed for recent graduates passionate about privacy and regulatory compliance. You will partner with the Bank’s Data Protection Officer to monitor adherence to the Data Protection Act, conduct audits, update policies, and assist with breach investigations. The role includes mapping personal data flows, maintaining processing records, and supporting staff awareness programs. Ideal candidates hold a Law, IT, or Information Security qualification, possess basic knowledge of privacy law, and demonstrate strong analytical, communication, and teamwork skills. Apply now to launch your career in data protection.

Job Purpose:

The Data Protection Intern will support the SBM Bank Kenya Data Protection Officer in ensuring the organization’s compliance with data protection laws and internal privacy policies. This role involves assisting with data audits, documentation, awareness initiatives, and responding to data protection queries. This is an excellent opportunity for a motivated individual interested in privacy, information security, and regulatory compliance.

Key Responsibilities:

Compliance & Governance:

• Assist in monitoring compliance with data protection laws, including the Data Protection Act, 2019.
• Support the administration and updating of data protection policies, procedures, and records.
• Help in conducting Data Protection Impact Assessments (DPIAs).

Data Mapping & Documentation

• Participate in mapping personal data flows across the organization.
• Maintain records of processing activities (ROPAs).
• Assist in tracking data retention schedules and ensuring proper disposal of records.

Incident Management

• Support the DPO in documenting and tracking data breaches or privacy incidents.
• Participate in initial risk assessments and follow-ups.

Training & Awareness

• Assist in developing privacy awareness materials for staff.
• Coordinate and support internal training sessions on data protection.

Research & Continuous Improvement

• Conduct research on emerging privacy trends, regulatory updates, and best practices.
• Assist in preparing reports, presentations, and compliance dashboards

Knowledge, Skills and Experience

• Recently completed a degree in Law, KSL Post Graduate Diploma, Information Security, or a related field.
• Basic understanding of data protection principles and privacy laws (e.g., Kenya Data Protection Act, GDPR is a plus).

Technical & Soft Skills

• Strong attention to detail and analytical skills.
• Good written and verbal communication.
• Ability to maintain confidentiality and handle sensitive information with discretion.
• Proficiency in Microsoft Office tools (Word, Excel, PowerPoint).
• Interest in compliance, privacy, cybersecurity, or regulatory frameworks.

Personal Attributes

• High integrity and ethical conduct.
• Willingness to learn and adapt quickly.
• Proactive, well-organized, and able to work both independently and in teams.
• Problem-solving mindset with curiosity for emerging data protection issues.