Assistant Privacy, Risk and Compliance Officer | TP Kenya

Job Summary / Overview

The Assistant Privacy, Risk & Compliance Officer is responsible for providing operational and administrative support to the PRCO in executing global privacy, risk, and compliance programs at the country level. The role assists in maintaining accurate records, gathering evidence for audits, tracking vendor risks, and monitoring compliance controls. This position is crucial for ensuring that the subsidiary remains audit-ready and that the day-to-day compliance framework is effectively maintained.

Key Responsibilities and Accountabilities

Records Management: Assist the PRCO in maintaining the accuracy, completeness, and ongoing update of Records of Processing (RoPAs) for both controller and processor activities in OneTrust.

Audit & Evidence Support: Gather, organize, and upload evidence for internal and external privacy audits into the relevant compliance tools (e.g., OneTrust, GCT). Track action plan progress and follow up with internal departments to ensure timely submission.

Vendor & Third-Party Risk: Support vendor due diligence by coordinating the collection of DPAs, security assessments, and contract clauses from procurement and legal teams.

Control Monitoring: Monitor the completion of mandatory privacy controls, such as policy communications, training completion, and consent tracking.

Incident Support: Assist in the logging, assessment, and escalation of potential data breaches, under the direction of the PRCO.

Policy & Communication Support: Help coordinate the dissemination of privacy notices, internal guidelines, and awareness communications to the workforce.

Reporting: Compile data and prepare basic reports on compliance metrics, risk register updates, and audit status for the PRCO's review.

Education and Specific Training

Bachelor’s degree or equivalent experience

Privacy Background or Specialization

Work Experience

1-3 years of experience managing privacy and compliance programs within a large corporation.

Special Certifications

Certification(s) from an accredited institution for privacy and compliance

Required Skills

English language fluency (speaking, reading, writing)

Knowledge of data privacy laws and frameworks (e.g., GDPR, CCPA/CPRA)

Experience with risk management, controls, and assessments

Proficiency in GRC/privacy tools (e.g., OneTrust) and data/reporting analysis

Understanding of vendor risk and privacy in contracts (DPAs, SCCs)

Bachelor’s degree or equivalent experience

Privacy certification (e.g., CIPP/CIPM) or ability to obtain quickly

Proficiency in Microsoft Office (Excel, PowerPoint)

Experience with GRC tools, audits, and compliance reporting

Experience in privacy, risk, or compliance roles

Strong analytical thinking and problem-solving

Effective communication and stakeholder influence

High integrity, organization, and project management

Minimum qualifications

BA/BSc/HND

How to apply

Interested and qualified candidates should apply using the Apply Now button below.

Similar open roles

• Compliance OfficerBank of Africa Kenya Limited · Nairobi
• Head - Controls & GovernanceKCB Bank Kenya · Nairobi
• Risk and Compliance OfficerMater Misericordiae Hospital · Nairobi
• Senior Manager, Compliance & Data PrivacyNCBA Group · Nairobi
• Assistant Risk and Compliance OfficerWorld Vision Kenya · Nairobi
• Head of Audit, Risk & ComplianceBridge Talent Management · Nairobi