Manager - Information Security

Qualifications:

• Bachelor’s degree or equivalent experience in information sciences, Information management, Information systems, Information Technologies, Law or any other related course.
  
• Proficiency in Information Technology Management and a great interest in developments in this field.
  
• Professional certification such as CIPP/E (Certified Information Privacy Professional) preferred.
  

Experience:

• Project Management Experience – evidence of rolling out sophisticated projects in a large organisation.
  
• Budget Management experience – demonstrable ability to create and effectively manage department budgets.
  
• Practical experience in IM&S, data protection, records management and/or archive administration.
  
• Previous experience of developing and implementing file plans and retention schedules.
  
• Previous experience of working in a records management position with clear results.
  
• Understanding of records management and data protection and relevant legislation.
  
• +5 years of experience in information management or data protection roles in a large or complex organisation.
  
• Proven track record of managing complex projects within a multinational organization.
  

• The role holder will be a key member of the Kenya Legal Team, represent Legal in multi-functional meetings and will closely collaborate with the KBL, EABL and above market legal teams.
  
• Lead and drive the EABL IM&S committee as per the company IM&S policy as a key deliverable.
  
• Lead and drive the EABL Kenya Data Protection Governance Committee as per the Terms of Reference, applicable policies and the law.
  
• Drive, embed, support, implement and achieve the strategic plans and objectives of IM&S and data protection and the Legal Function in line with the business strategy.
  
• Continuously develop technical and managerial skills and acting as a leader and role model in the business.
  
• Fully implement and maintain information management and data governance controls, ensuring ongoing compliance with applicable laws and regulations, and maintaining an effective compliance environment in Kenya aligned with global and local requirements.
  
• Identify, assess and handle IM&S and personal data processing risks, including remediation actions, and supervise regulatory developments to ensure timely updates to policies and practices.
  
• Develop and maintain retention schedules and Information Asset Inventories, ensuring proper classification, handling and lifecycle management of personal data.
  
• Lead and conduct IM&S and data protection audits in line with policies and the annual audit plan, and liaise with external auditors to support compliance reviews.
  
• Provide leadership to the IM&S governance structure and coordinate governance committees, while guiding business units to ensure accountability, consistency and self-sufficiency in implementation.
  
• Work closely with IT to ensure appropriate information security controls and system monitoring are in place and maintained to safeguard information, particularly personal data.