Compliance & Data Protection Officer Old Mutual

To recruit new talent to efficiently plug the resource constraints in the risk and compliance function for the Ugandan entities (GI, Life and Asset Management) aimed at improving the risk culture and control environment.
To Act as the company Data Protection Officer. In this role you will ensure that that company complies with all the Data protection and Privacy Laws. Act as the contact person between the organization for members of staff, regulators and any relevant public bodies on issues related to data Protection and all the other roles as described in part 3 of this JD.
• Challenges risk management information received from the business.
• Ensures risk processes (risk assessment, identification, management, reporting and optimization) are occurring at BU level.
• Provides knowledge of systems/supporting guidance, procedures and assists the business in implementation of risk issues.
• Provides oversight for risk management activities ensuring business Risk Policy statements are met.
• Identifies applicable legislation and analyses the impact thereof on the BU and applies this to BU processes and procedures.
• Ensures compliance by the BU with applicable legislation by means of the implementation of compliance risk management and monitoring plans.
• Ensures monthly risk and control self-assessments are updated and follows up with various Line Managers.
• Performs quarterly compliance audits on policies and regulations in line with.
• Reports compliance breaches to management on a monthly/quarterly basis.
• Facilitates and in appropriate circumstances partakes in, remedial actions developed by the BU to help eliminate noncompliance with legislation and regulation.
• Ensures monthly risk control logs are updated and follows up with various Line Managers.
• Compiles monthly reports (standing reports) on issues identified and reports on actions taken to rectify the problem.
• Act as the primary point of contact within the organization for members of staff, regulators, and any relevant public bodies on issues related to data protection
• Ensure the company’s policy is in accordance with General Data Protection Laws and Regulations.
• Evaluate the existing data protection framework and identify areas of non or partial compliance and rectify any issues
• Devise training plans and provide data protection advice and support for members of staff
• Inform and advise the Data Controller or Data Processor on all matters related to data protection.
• Promote a culture of data protection compliance across all units of the organization
• To provide expert advice and educate employees on important data compliance requirements
• Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders
• Hold training with staff members across different business units who are involved in data handling or processing
• Proactively conduct audits to ensure compliance and address potential issues
• Maintain records of all data processing activities carried out by the company
• Serve as the point of contact between the company and the data protection authorities
Skills
Auditing, Audits Compliance, Compliance Risk Management, Data Compliance, Data Handling, Data Processing, Data Protection, Data Protection Laws, Ensure Compliance, Processing, Processors, Risk Compliance, Risk Management, Standard Operating Procedures (SOPs)
Education
Honours Degree (Hons): Accountancy And Law (Required)
Closing Date
04 November 2022