Data Protection Assistant

To support its long-term strategic objectives, KCA University seeks to recruit a candidate for the position of Data Protection Assistant to be based at their Main Campus in Ruaraka, Nairobi.

KCA University (KCAU) is one of Africa’s leading private universities, distinguished by its strong focus on business and technology. The University is committed to becoming a comprehensively digital-enabled institution while fostering a culture of academic excellence, innovation, entrepreneurship, and commercialisation.

DATA PROTECTION ASSISTANT

Job Objective

The job holder will ensure compliance and data practices internally to ensure the University and its functions comply with the requirements of the Kenyan Data Protection Act, 2019, its attendant regulations, and other relevant national legislation.

Duties and Responsibilities

• Assist in conducting Data Protection Impact Assessments (DPIAs) and compliance audits to ensure adherence to the Data Protection Act, 2019.
• Support the development, review, and updating of data protection policies, procedures, and privacy notices.
• Monitor and document data processing activities across university departments to identify compliance gaps and associated risks.
• Assist in handling data subject rights requests, including access, rectification, and erasure of personal data.
• Participate in training and awareness campaigns on data privacy, information security, and compliance best practices.
• Research emerging data protection laws, regulations, and best practices to support continuous improvement
• Assist in reviewing third-party data processing agreements and ensuring vendors comply with data protection obligations.
• Support incident response activities, including data breach reporting and mitigation measures.
• Maintain accurate records of data protection activities and generate reports for the Data Protection Officer.
• Perform any other duties related to data protection and compliance as assigned by the Data Protection Officer.

Qualifications And Experience

• Bachelor’s degree in ICT or its equivalent from an accredited/recognised Institution.
• One (1) year of relevant work experience in a University or in a comparable Institution.
• Data protection and/or privacy certification, such as CIPP, CIPM, CIPT, CDPSE, etc., will be an added advantage.

Other Skills And Competencies

• Proficient in the use of word processors, spreadsheets, presentations, and database management software.
• Knowledge of data security and privacy tools.
• Strong change and project management skills
• Well-developed report writing skills  for preparing compliance documentation and audit reports.
• Exceptional communication and interpersonal skills, with the ability to engage stakeholders at all levels.