Data Protection and Privacy Analyst Equity Bank

The holder of the position will be responsible for analyzing, designing, and implementing data privacy policies and procedures, the Analyst will work closely with other members of the IT, Compliance and Legal departments to ensure that the organization’s data privacy practices comply with all applicable laws and regulations. The Analyst will keep the Data Protection Officer and the Head of Risk Management up to date on the data protection compliance.

Data Protection and Privacy Responsibilities
• The Data Protection and Privacy Analyst shall be responsible for analyzing the Bank’s data privacy risks and vulnerabilities, conduct data protection/privacy impact assessments and risk assessments to identify potential threats, assess the likelihood of a breach, and determine the impact of a breach on the bank.
• Regular review of policies and procedures to protect the Bank’s data, ensure that the policies comply with all applicable laws and regulations and ensure these policies are communicated effectively to all employees.
• Coordinate implementation of solutions to ensure the Bank’s data is secure, work with IT department to ensure that the necessary security protocols are in place and that all data is stored in a secure manner.
• Monitor compliance with data privacy laws, policies, and procedures, conduct Data Protection & Privacy Audits to ensure that the policies are being followed and that data is being stored and processed securely.
• Assist in the development of annual data privacy training materials and business unit specific training, and conduct training sessions for employees on the importance of data privacy and how to maintain compliance with data privacy policies and procedures.
• Support various units of the bank to develop data inventories and mapping.
• Handle enquiries and issues relating to data privacy practices such as withdrawal of consent, the right to rectification, and other related data subject rights. The Analyst shall also manage incident and breach management.
• Stay knowledgeable of current advances in all areas of Data Protection and Privacy, monitor the industry landscape to keep visibility on evolutions, trends, and best practices related to Data Privacy.
• Perform any other duties as may be assigned from time to time.

DESIRED KNOWLEDGE, SKILLS & ABILITIES
• Must have a bachelor’s degree in either Information Technology, Data Science, Computer Science, or a related field.
• Minimum of 2 years’ experience in the same role, or in a similar environment with a consistently good performance record for the last 1 year.
• Good knowledge and understanding of cyber security, information governance and various data privacy technologies, including encryption and access control systems.
• General knowledge of data privacy, data handling and data classification.
• Capable of conducting data privacy compliance reviews and audits.
• Ability to learn and easily adapt to changes in regulatory requirements, bank processes and procedures.
• Must be proactive, have critical thinking, analytical skills, pay attention to detail with problemsolving skills to quickly identify threats and vulnerabilities of significance to the institution.
• Ability to produce clear and concise reports to Senior Management.
• Ability to deal with sensitive issues in a confidential manner.
• Good inter-personal and communication skills to work effectively with other members of the bank.
• Professional qualification such as Certified Data Privacy Solutions Engineer (CDPSE)OR GDPR – Certified Data Protection Officer (CDPO) will be an added advantage.