Assistant Privacy, Risk and Compliance Officer | TP Kenya

Job Summary / Overview

The Assistant Privacy, Risk & Compliance Officer is responsible for providing operational and administrative support to the PRCO in executing global privacy, risk, and compliance programs at the country level. The role assists in maintaining accurate records, gathering evidence for audits, tracking vendor risks, and monitoring compliance controls. This position is crucial for ensuring that the subsidiary remains audit-ready and that the day-to-day compliance framework is effectively maintained.

Key Responsibilities and Accountabilities

• Records Management: Assist the PRCO in maintaining the accuracy, completeness, and ongoing update of Records of Processing (RoPAs) for both controller and processor activities in OneTrust.
• Audit & Evidence Support: Gather, organize, and upload evidence for internal and external privacy audits into the relevant compliance tools (e.g., OneTrust, GCT). Track action plan progress and follow up with internal departments to ensure timely submission.
• Vendor & Third-Party Risk: Support vendor due diligence by coordinating the collection of DPAs, security assessments, and contract clauses from procurement and legal teams.
• Control Monitoring: Monitor the completion of mandatory privacy controls, such as policy communications, training completion, and consent tracking.
• Incident Support: Assist in the logging, assessment, and escalation of potential data breaches, under the direction of the PRCO.
• Policy & Communication Support: Help coordinate the dissemination of privacy notices, internal guidelines, and awareness communications to the workforce.
• Reporting: Compile data and prepare basic reports on compliance metrics, risk register updates, and audit status for the PRCO's review.

Education and Specific Training

• Bachelor's degree or equivalent experience
• Privacy Background or Specialization

Work Experience

• 1-3 years of experience managing privacy and compliance programs within a large corporation.

Special Certifications

• Certification(s) from an accredited institution for privacy and compliance

Required Skills

• English language fluency (speaking, reading, writing)
• Knowledge of data privacy laws and frameworks (e.g., GDPR, CCPA/CPRA)
• Experience with risk management, controls, and assessments
• Proficiency in GRC/privacy tools (e.g., OneTrust) and data/reporting analysis
• Understanding of vendor risk and privacy in contracts (DPAs, SCCs)
• Bachelor's degree or equivalent experience
• Privacy certification (e.g., CIPP/CIPM) or ability to obtain quickly
• Proficiency in Microsoft Office (Excel, PowerPoint)
• Experience with GRC tools, audits, and compliance reporting
• Experience in privacy, risk, or compliance roles
• Strong analytical thinking and problem-solving
• Effective communication and stakeholder influence
• High integrity, organization, and project management