Compliance and Data Protection Manager

Reporting to: Director, Legal & Regulatory Affairs

Business Unit Legal & Regulatory Affairs

Who We Are

Telkom is a technology company that provides integrated solutions to individuals, Small and Medium-sized Enterprises (SMEs), Government and large corporates in Kenya, drawing from a diverse solutions suite that includes voice, data/connectivity, digital financial services, as well as network services. Powered by its vast fiber optic infrastructure, it is also a major provider of wholesale carrier-to-carrier traffic, within the country and the region. 

Role Purpose:  

The purpose of this role is to establish and implement the necessary governance policies and standards to ensure that legal, risk, compliance, public policy and regulatory matters are managed in a robust and agile manner. The role supports the Legal and Regulatory function in the attainment of its key objective of protecting Telkom’s brand, its customers and shareholders.

Key Duties and Responsibilities

• Policy Analysis and Monitoring: Analyzing the impact of new regulations on the company's operations and providing recommendations for necessary adjustments for maintaining compliance. In addition, collaborating with business functions to develop and implement tactics that maximize policy impact.

• Policy Development and Implementation: Collaborating with internal teams for establishing, disseminating and implementing company policies that align with regulatory compliance requirements. 

• Compliance Strategy: Developing and implementing a targeted, risk based and comprehensive regulatory compliance strategy to ensure the company's adherence to relevant laws and regulations spanning various sectors. Further, working with the Regulatory Manager and other stakeholders to understand regulatory changes and trends in order to proactively address potential compliance challenges.

• Compliance Monitoring: Leading the regulatory compliance monitoring function and staying updated on the latest developments in laws, regulations, and licensing requirements.

• Regulatory Liaison: From time to rime, a point of contact with regulatory authorities, industry bodies, external legal advisors and other stakeholders, representing the company's interests and fostering positive relationships.

• Business Partnering: Supporting internal teams in adhering to regulatory expectations, best practice and as well as the company’s policies and processes. Further, participate in the development and implementation of systems that result in improved efficiency and reduced organizational risk.

• Compliance Reporting: Preparing and presenting regulatory compliance reports to senior management and relevant stakeholders, ensuring transparent and accurate communication to internal and external stakeholders.

• Risk Assessments: Coordinating and supporting internal and external audits related to contractual and regulatory compliance and supporting development of correction plans with a view to closing identified gaps. In addition, handling any regulatory investigations and responding to compliance inquiries from regulatory bodies.

• Issue Management & Escalation: Identifying potential areas of non-compliance and escalating any issues to the relevant stakeholders or subject matter specialists, whenever necessary.

• Training: Provide staff training on contractual and regulatory compliance related topics, policies and procedures.

Academic background & Professional Knowledge:

• A Bachelor’s degree in Law coupled with relevant practical experience.

• Professional certifications in a relevant field are an added advantage

• At least 8 years’ experience within a technology, information security, legal, public policy, audit and/or risk function.

• Experience handling vast amounts of company data and/ or management experience in a highly regulated industry is preferred.

Here Are The Skills We Are Looking For:
• In-depth knowledge of regulatory frameworks, laws, and standards governing telecommunication / ICT operations.

• In-depth understanding of the GDRP, the national and other relevant Data Protection Laws and practices.

• In depth understanding of the regulatory framework underpinning mobile financial services,

• Good understanding of the telco business processes, data processing operations, information systems and regulatory compliance operations.

• Excellent understanding of contract drafting and commercial law.

• Ability to engage regulators and other stakeholders effectively. Experience in managing compliance incidents and breaches.

• Knowledge of managing data breaches and data privacy related incidents

• Detail-oriented approach needed to recommend and implement improvements on a broad range of compliance issues.

• Experience with public policy issues within government, public interest groups or corporate teams.

How to Apply:

Applications should be sent providing an updated Curriculum Vitae (CV) before 13th September 2024 including details of your current telephone contacts and names of three referees.

Please note, only shortlisted candidates will be contacted. Telkom Kenya is an equal opportunity employer and all qualified applicants will  receive consideration for employment without regard to tribe, religion, gender, age or disability.