Our client, a leading organization in the hospitality industry with operations across East Africa, is seeking an experienced and highly competent
Group Data Protection Officer (DPO)
to oversee data privacy and compliance across its hotels, lodges, travel services, and regional corporate functions.
The DPO will ensure that all personal data relating to guests, employees, suppliers, and partners is processed in full compliance with regional data protection laws and international standards.
The ideal candidate is a compliance expert with excellent stakeholder management skills, and a proven ability to implement practical, organization-wide data protection frameworks.
Key Responsibilities
Ensure all business units comply with the Kenya DPA (2019), Tanzanian PDPA (2022), Rwandan Law No. 058/2021, and applicable international data protection standards.
• Lead and support Data Protection Impact Assessments (DPIAs) for new guest management systems, booking platforms, digital tools, loyalty programs, and high-risk data processing activities.
• Develop, implement, and enforce data protection policies, SOPs, and privacy guidelines tailored to hospitality operations such as guest check-ins, reservations, CCTV, payments, and marketing.
• Oversee data subject rights requests (DSARs) from guests, employees, and partners, ensuring timely, secure, and legally compliant responses.
• Serve as the primary liaison with ODPC, PDPC, NCSA, and other regulators, coordinating audits, inspections, and compliance submissions.
• Lead data breach incident response, assessing impact, notifying regulators and affected individuals, and driving corrective actions.
• Maintain and update Records of Processing Activities (ROPA) and data flow maps for all hotel systems, departments, and third-party service providers (e.g., PMS, POS, CRM, and booking engines).
• Deliver data privacy training and awareness programs to hotel staff, front-office teams, reservations, marketing, HR, and management to embed a strong culture of data protection.
Key Qualifications.
Bachelor’s degree in Law, Information Security, Computer Science, or a related field; specialized training or a postgraduate qualification in Data Protection is an added advantage.
• Experience in data protection, compliance, information security, or regulatory roles, preferably within the hospitality, travel, or service industry.
• Strong understanding of regional data protection laws (Kenya DPA, Tanzanian PDPA, Rwandan Law No. 058/2021) and international frameworks such as GDPR and ISO 27701.
• Demonstrated experience conducting DPIAs, managing DSARs, and driving data privacy programs in operational environments.
• Knowledge of hospitality systems (PMS, POS, booking engines, CRM platforms) and data flows within hotel and guest service operations is highly desirable.
• Strong risk management, analytical, and documentation skills with the ability to interpret legal requirements into practical operational controls.
• Excellent communication, training, and stakeholder engagement skills, capable of working with multi-functional teams across different countries.
Please click on the tab below to apply:
Summit Recruitment and Search Africa is a leading Recruitment and Executive Search agency headquartered in Kenya providing outstanding talent to a wide range of companies and NGOs in various business sectors across Africa.
We endeavour to make contact with all of our applicants, but unfortunately, high volumes of applications make this unrealistic. If you do not hear from us within two weeks your application has not been successful on this occasion. This does not mean you will not be considered for future roles so please keep an eye on our job board and apply for positions that match your skills and experience.
Summit Recruitment and search Africa upholds a steadfast commitment to
sustainability,
inclusivity
, and
equality
as integral pillars of our operations. Dedicated to driving positive change through the adoption of sustainable practices that minimize our ecological footprint. We firmly believe in fostering an inclusive and diverse workforce that embraces individuals from all races, genders, and backgrounds, ensuring equal opportunities for every candidate. Summit recruitment actively advocate for equality by cultivating an environment of respect, fairness, and non-discrimination. By prioritizing sustainability, inclusivity, and equality, we aim to set a high industry standard and contribute to the betterment of society as a whole.
*** Summit Recruitment & Search, as a policy, does not charge any fee as a
pre-employment or post-employment requirement***
Similar open roles
- Legal Manager (Agriculture) – Nairobi, Kenyaan agricultural company based in Nairobi · Nairobi
- Legal Officer – Bomet, Kenyain the Agriculture sector
- Senior Legal Counsel- Litigation at KCB Bank KenyaKCB Bank Kenya · Nairobi
- Assistant Investigator - NanyukiBrighterMonday Consulting · Rest of Kenya
- County Attorney at Nakuru County GovernmentNakuru County Government · Nairobi
- Manager – Compliance at MAL ConsultancyMAL Consultancy · Nairobi
Let RezSync handle this application.
Sign up, upload your resume, and RezSync tailors your documents to roles like this one and applies for you, with a full log and a pause switch you own.
Prefer to apply yourself? Apply on summitrecruitment-search.com