Job Purpose:

The Data Protection Manager will oversee the coordination and implementation of data protection and privacy within the Bank's technology operations. Reporting to the Data Protection Officer, the role holder will monitor compliance, provide expert advice on data protection obligations, champion privacy awareness across technology-driven processes, and ensure effective reporting on privacy-related matters.

Main Responsibilities:

• Review technology processes implemented by the Bank to inform, advise, and issue recommendations to the business with regards to Data Protection, Privacy, and Compliance.
• Responsible for the implementation of data privacy in technology engagements and to monitor compliance in technology facing operations and projects through enforcing privacy by design and default in technology operations.
• Draft processes and procedures that will assist in compliance with Data Protection Act in technology operations, reporting to the DPO any internal and external Privacy related escalations while gathering and analyzing relevant data to improve internal processes.
• Review and respond to Privacy related inquiries and requests efficiently and accurately and responsible for tracking Privacy requests and regularly training stakeholders involved in Data collection/processing.
• Lead champion for data protection awareness in technology facing operations.
• Drafting internal documentation, workflows and procedures concerning Privacy and working with the DPO to ensure data protection clauses are included in all technology contracts.
• Maintain and update the Personal Data inventory for respective locations, ensuring reconciliation with the Information Technology Asset inventory.
• Conducting Privacy Assessments and Data Protection Impact Assessments for technology facing operations during the initiation of any new/modified business process, facility, service, or technology that shall impact BPR Bank privacy posture.
• Conduct regular assessments to ensure the Bank’s compliance with the Data Protection laws and provide advice on the impact of Data Protection efforts working closely with the DPO in the management of privacy related incidences within technology operations.

Daily Responsibilities:

• Provide guidance to technology facing operations across BPR Bank on data protection through ensuring privacy by design and default in all technological operations.
• Coordinate, collate and analyze data protection impact assessments and privacy assessments in technology operations, and data protection reports and make appropriate recommendations to address gaps and key issues in the management of data protection.
• Guiding, tracking, monitoring and reporting on business units’ data protection compliance reports following key incidents to ensure adequate visibility and closure.
• Championing continuous data protection awareness and training for technology facing operations.
• Taking the lead in maintaining and updating the Personal Data inventory for respective technology locations, ensuring reconciliation with the respective Information Technology Asset inventory.

Educational qualifications and work experience:

• Bachelor’s degree in business, Management, Technology and any relevant Graduate Degree.
• Data Protection Related Professional Courses
• Three (3) Years’ experience in Data Protection, Technology and Project Management, Risk Management, Banking Operations.