Data Privacy Officer Job Vacancy in Nairobi, Kenya – Energy

Job Description

Position:Data Privacy Officer

Company:Kenya Power and Lighting Company

Location:Nairobi, Kenya

Experience:5+ years in data protection, privacy law, or compliance roles

Education:Bachelor’s degree in Law, Information Security, or related field

Employment Type:Full-time

Industry:Energy

Department:Legal & Compliance

Salary:SSP 180,000 – 250,000 per month

Vacancies:1

Company Overview

Kenya Power and Lighting Company (KPLC) is the leading electricity utility in Kenya, delivering reliable power to millions of homes and businesses across the nation. With a legacy spanning over six decades, KPLC is committed to innovation, sustainability, and regulatory excellence. As a cornerstone of the Kenyan energy sector, the company plays a pivotal role in national development, supporting industrial growth, digital transformation, and rural electrification.

Operating under the Ministry of Energy, KPLC adheres to stringent national and international standards, ensuring that its operations align with best practices in governance, risk management, and corporate responsibility. The organization continuously invests in modern grid infrastructure, smart metering, and renewable energy integration, positioning itself as a forward‑looking leader in the African power market.

Career opportunities at KPLC are highly sought after, offering professionals a platform to contribute to Kenya’s energy future while advancing their own expertise. The company values diversity, ethical conduct, and a collaborative culture that empowers employees to drive impactful change. Joining KPLC means becoming part of a dynamic team dedicated to delivering safe, affordable, and sustainable electricity to the nation.

Job Overview

The Data Privacy Officer will lead KPLC’s privacy program, ensuring compliance with Kenya’s Data Protection Act, industry regulations, and international best practices. This role is critical in safeguarding customer and employee data, mitigating privacy risks, and fostering a culture of data responsibility throughout the organization. The officer will work closely with legal, IT, security, and business units to embed privacy by design into all processes and systems.

As part of KPLC’s commitment to excellence, the Data Privacy Officer will also serve as the primary point of contact for data protection authorities, manage data breach response, and conduct privacy impact assessments for new projects. This position offers a unique opportunity to shape privacy governance in a high‑impact sector, contributing directly to the trust and confidence of millions of Kenyan electricity consumers.

For more information about KPLC and its mission, visit the main website: https://kenyajobsearch.com.

Explore related opportunities in the region at: https://ugandajobssearch.com/job-vacancy-uganda/.

Key Responsibilities

• Develop, implement, and maintain KPLC’s data privacy framework in line with the Data Protection Act 2019.
• Conduct privacy impact assessments (PIAs) for new products, services, and technology initiatives.
• Monitor and audit data processing activities to ensure compliance across all business units.
• Serve as the primary liaison with the Data Commissioner and other regulatory bodies.
• Lead incident response for data breaches, including investigation, reporting, and remediation.
• Provide privacy training and awareness programs for employees at all levels.
• Advise senior management on privacy risks and recommend mitigation strategies.
• Maintain up‑to‑date documentation of data inventories, processing activities, and consent mechanisms.

Required Skills

• In‑depth knowledge of Kenya’s Data Protection Act, GDPR, and related privacy regulations.
• Strong analytical and risk assessment capabilities.
• Excellent communication skills for stakeholder engagement and training delivery.
• Proficiency in privacy management tools and data mapping software.
• Ability to translate legal requirements into practical operational controls.
• Experience with incident response and forensic investigation processes.
• High ethical standards and a commitment to confidentiality.

Education

A Bachelor’s degree in Law, Information Security, Computer Science, or a related discipline is required. Professional certifications such as CIPP/E, CIPM, or ISO 27701 Lead Implementer are highly desirable.

Experience

Minimum of five (5) years of hands‑on experience in data protection, privacy compliance, or legal advisory roles within a regulated industry. Experience in the energy sector or large utilities is an advantage.

Salary

The successful candidate will receive a competitive salary ranging from SSP 180,000 to SSP 250,000 per month, commensurate with experience and qualifications. Additional performance‑based incentives may be offered.

Benefits

• Comprehensive health insurance covering employee and dependents.
• Retirement savings plan with employer contributions.
• Paid annual leave and statutory holidays.
• Professional development allowance for certifications and courses.
• Employee assistance program and wellness initiatives.

Training

• Onboarding program covering KPLC’s governance, systems, and privacy policies.
• Continuous learning opportunities through internal workshops and external seminars.
• Access to industry conferences on data protection and cybersecurity.

Working Environment

KPLC offers a modern office environment in Nairobi’s central business district, equipped with state‑of‑the‑art technology and collaborative workspaces. The culture promotes teamwork, innovation, and a strong sense of purpose, encouraging employees to balance professional growth with personal well‑being.

Application Process

Interested candidates should submit their updated CV and a cover letter outlining relevant experience through the online portal on the KPLC careers page. Applications will be reviewed on a rolling basis, and shortlisted candidates will be contacted for interviews.

Equal Opportunity Statement

KPLC is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of gender, ethnicity, disability, or background. All qualified applicants will receive consideration for employment without regard to any protected characteristic.