All open roles
Open role

Group Data Protection Officer- Nairobi, Kenya

a leading organization in the hospitality industry with operations across East Africa

a leading organization in the hospitality industry with operations across East AfricaPosted 11 October 2026Apply by 10 November 2026

Our client, a leading organization in the hospitality industry with operations across East Africa, is seeking an experienced and highly competent

Group Data Protection Officer (DPO)

to oversee data privacy and compliance across its hotels, lodges, travel services, and regional corporate functions.

The DPO will ensure that all personal data relating to guests, employees, suppliers, and partners is processed in full compliance with regional data protection laws and international standards.

The ideal candidate is a compliance expert with excellent stakeholder management skills, and a proven ability to implement practical, organization-wide data protection frameworks.

Key Responsibilities

Ensure all business units comply with the Kenya DPA (2019), Tanzanian PDPA (2022), Rwandan Law No. 058/2021, and applicable international data protection standards.

• Lead and support Data Protection Impact Assessments (DPIAs) for new guest management systems, booking platforms, digital tools, loyalty programs, and high-risk data processing activities.

• Develop, implement, and enforce data protection policies, SOPs, and privacy guidelines tailored to hospitality operations such as guest check-ins, reservations, CCTV, payments, and marketing.

• Oversee data subject rights requests (DSARs) from guests, employees, and partners, ensuring timely, secure, and legally compliant responses.

• Serve as the primary liaison with ODPC, PDPC, NCSA, and other regulators, coordinating audits, inspections, and compliance submissions.

• Lead data breach incident response, assessing impact, notifying regulators and affected individuals, and driving corrective actions.

• Maintain and update Records of Processing Activities (ROPA) and data flow maps for all hotel systems, departments, and third-party service providers (e.g., PMS, POS, CRM, and booking engines).

• Deliver data privacy training and awareness programs to hotel staff, front-office teams, reservations, marketing, HR, and management to embed a strong culture of data protection.

Key Qualifications.

Bachelor’s degree in Law, Information Security, Computer Science, or a related field; specialized training or a postgraduate qualification in Data Protection is an added advantage.

• Experience in data protection, compliance, information security, or regulatory roles, preferably within the hospitality, travel, or service industry.

• Strong understanding of regional data protection laws (Kenya DPA, Tanzanian PDPA, Rwandan Law No. 058/2021) and international frameworks such as GDPR and ISO 27701.

• Demonstrated experience conducting DPIAs, managing DSARs, and driving data privacy programs in operational environments.

• Knowledge of hospitality systems (PMS, POS, booking engines, CRM platforms) and data flows within hotel and guest service operations is highly desirable.

• Strong risk management, analytical, and documentation skills with the ability to interpret legal requirements into practical operational controls.

• Excellent communication, training, and stakeholder engagement skills, capable of working with multi-functional teams across different countries.

Please click on the tab below to apply:

Summit Recruitment and Search Africa is a leading Recruitment and Executive Search agency headquartered in Kenya providing outstanding talent to a wide range of companies and NGOs in various business sectors across Africa.

We endeavour to make contact with all of our applicants, but unfortunately, high volumes of applications make this unrealistic. If you do not hear from us within two weeks your application has not been successful on this occasion. This does not mean you will not be considered for future roles so please keep an eye on our job board and apply for positions that match your skills and experience.

Summit Recruitment and search Africa upholds a steadfast commitment to

sustainability,

inclusivity

, and

equality

as integral pillars of our operations. Dedicated to driving positive change through the adoption of sustainable practices that minimize our ecological footprint. We firmly believe in fostering an inclusive and diverse workforce that embraces individuals from all races, genders, and backgrounds, ensuring equal opportunities for every candidate. Summit recruitment actively advocate for equality by cultivating an environment of respect, fairness, and non-discrimination. By prioritizing sustainability, inclusivity, and equality, we aim to set a high industry standard and contribute to the betterment of society as a whole.

*** Summit Recruitment & Search, as a policy, does not charge any fee as a

pre-employment or post-employment requirement***

Similar open roles

Let RezSync handle this application.

Sign up, upload your resume, and RezSync tailors your documents to roles like this one and applies for you, with a full log and a pause switch you own.

Prefer to apply yourself? Apply on summitrecruitment-search.com