Legal Counsel - Data Privacy at M-KOPA

What you will do:

• You will undertake privacy program remediation activities, conduct data audits to ensure compliance and provide advice on the impact of data protection efforts.
• You will conduct Data Protection Impact Assessments (DPIAs) and undertake the assessments following data privacy laws.
• You will identify areas of non or partial compliance with privacy law and rectify any issues.
• You will support implementation of essential elements of the Data Protection legislation, such as the principles of data processing, data subjects' rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches.
• You will review our policies following Data Protection Regulation and codes of practice.
• You will maintain comprehensive records of all data processing activities conducted by our company, including the purposes of all processing activities.
• You will develop guidelines and templates clauses and contracts for management of several team members and relationships relating to processing of personally identifiable information.
• You will raise awareness, brainstorm internal communications and training plans and provide data protection advice and support for members of staff.
• You will develop external communication plan for privacy awareness for third parties and partners.
• You will support in management and administration of privacy software and data incident response and data breach notification procedures.
• You will monitor industry best practice and trends for privacy and consumer protection to keep training material up to date.
• You will identify and use opportunities to improve the quality of data privacy processes and standards.
• Promote a culture of data protection compliance across all units of the organization and suppliers involved in processing personal data.
• Support special projects for our company, including privacy certification, audits, new market expansion, legal & privacy compliance.
• Help with data privacy and consumer protection related due diligence, queries for transactions and from team members.

Your application should include:

• Your experience conducting Data Protection Impact Assessments (DPIAs) and undertake the assessments following data privacy laws.
• Your experience with data processing operations, including information systems, data security and data protection needs.
• Your experience helping with data privacy and consumer protection related due diligence, queries for transactions and from team members.
• Any multijurisdictional data privacy compliance experience

Who we are looking for:

• Over five (5) years' experience working in data protection or privacy compliance.
• A Qualified lawyer in line with your country requirements.
• Experience running data privacy operations including data privacy impact assessments, transfer impact assessments, vendor assessments, risk management.
• Experience with data processing operations, including information systems, data security and data protection needs.
• Expertise on Data Protection laws across M-KOPA markets.
• Privacy Related Professional certification (CIPP, CIPT, PECB IEC/ISO 27001, 27701 Implementer or Auditor) an added advantage.