Executive Head of Privacy

• Shape and govern Safaricom's enterprise-wide privacy, data protection, and responsible data use strategies and frameworks.
• Lead privacy risk assessments, monitoring, breach response, and regulatory engagement.
• Embed privacy by design and ethical data use in technology, product development, and AI governance.
• Manage customer consent, data lifecycle, rights enablement, and cross-border data transfers.
• Oversee privacy assurance for M PESA, digital services, partners, and APIs.
• Produce compliance reports, dashboards, and ensure regulatory audit readiness.
• Build privacy culture, capability, and implement privacy technology transformation across the enterprise.

• Bachelor's degree in Law, Information Technology, Data Science, Cybersecurity, Risk, Business, or related field.
• Postgraduate qualification such as LLM, MSc Data Protection, MBA, Cybersecurity, Digital Governance, or Risk Management is strongly preferred.
• At least one advanced privacy credential like CIPP/E, CIPM, CIPT, CDPSE, ISO 27701/27001 Lead Implementer or Auditor; CISM/CISSP is advantageous.
• Deep expertise in Kenya Data Protection Act (DPA 2019), ODPC regulatory framework, GDPR-equivalent standards, privacy by design, data governance, consent management, privacy impact assessments, breach management, and third-party privacy risk management.
• Strong understanding of AI governance, API ecosystems, cloud data architecture, customer analytics, and telco/mobile money data risks.
• 12 to 15+ years of experience in Privacy, Data Protection, Information Governance, or Digital Risk.
• Minimum 5+ years in a senior leadership role.
• Experience in telecommunications, fintech, banking, digital platforms, or tech-driven environments.
• Proven experience engaging with regulators, especially ODPC, CBK, and CAK.
• Membership in a recognized professional body is required.
• High ethical standards, integrity, confidentiality, and independence.
• Exceptional communication, influencing, and relationship-building skills.
• Strong strategic systems thinker with resilience and sound judgment under pressure.
• Commitment to capability building and privacy culture uplift.

Apply through the employer's official contact by clicking the apply button and attaching your resume. The closing date for applications is Thursday, 29 October 2026.