Data Protection and Privacy Officer

Career Opportunity: Data Protection and Privacy Officer

Reports to: Head of Information Security

Department: Information Security

Location: Kigali, Rwanda

Application Deadline: October 30th, 2026, by 6:00PM

Office Location: Kigali Plot 314, Avenue de la Paix

About Ecobank

Ecobank is the leading pan-African banking group, operating in 34 African countries, with 4 representative offices outside Africa: Paris, London, Dubai, and Beijing. We are committed to driving financial integration and economic transformation through accessible, innovative, and inclusive banking solutions. In Rwanda, we play an essential role in enabling businesses to grow, trade, and thrive in a rapidly evolving economy.

Key Responsibilities

• Creating and maintaining data protection and privacy policies, procedures and practices (Record of Processing documentation, review of data processing agreements, privacy by design, etc.)
• Conducting data protection impact assessments and advice on issues where applicable.
• Ensuring information security activities aligns with data protection and privacy requirements.
• Interfacing with appropriate data protection regulatory authorities on compliance with data protection regulations.
• Monitoring compliance with data protection regulations, other applicable data protection provisions and strategies for protection of personal data, including the allocation of responsibilities, awareness-raising and training of staff (e.g.: Human Resources) involve in the processing operations and related verifications.
• Interfacing with appropriate internal and external stakeholders in Legal, Compliance and Technology to adhere to legal, contractual and supervisory authorities.
• Embedding data protection and privacy requirements into technology services and new projects where applicable.
• Maintaining data protection and privacy governance structure within the affiliate.
• Ensuring data protection and privacy issues are addressed at appropriate meetings within the affiliate
• Carry out routine tasks associated with data protection & privacy
• Ensure privacy technologies and capabilities are embedded in all applicable/relevant solutions and projects
• Liaises with contractors and service providers to ensure that all activities are in line with the Banks Information Security Policy and regulatory Business continuity requirement.
• Provides Information Security and privacy Awareness training to all employees, and other third parties, ensuring proper information security clearance in accordance with established bank information security policies and procedures.
• Initiates, facilitates, and promotes activities to create information security and privacy awareness within the Bank.
• Develop and implement an ongoing risk assessment program targeting information protection& privacy and business systems. Recommend methods for vulnerability detection and remediation.
• Perform information security risk, vulnerability assessments and serves as an internal assessor for data protection and privacy issues.
• Report any incident occurred and address security incidents, respond to alleged policy violations from staff, contractors and external parties.
• Review of physical and logical protection of Information and ensure logical access management review is done, and any non-conformity is reported
• Carry out any other responsibilities that may be assigned by Management

Key Relationships

Internal:

• All departments

Who We're Looking For

Qualifications & Experience

• Bachelor's degree in computer science, Information Technology, MIS or Information Security and professional qualifications preferably in cybersecurity/data protection such as ISO 27001 lead Implementor, CDSPE, ISO 27701 Lead Implementor, CIPT (a Plus)
• Minimum of 3 years' experience in the information security/cybersecurity/data protection roles with some experience in the financial services sector.
• Background and expertise data protection & Privacy compliance, IT audit or IT security
• Experience of promoting a data privacy culture of awareness and understanding (preferably within a Bank)
• Experience of developing and accessing privacy policies and controls that minimize risk and ensure compliance
• Experience of responding to potential privacy incidents, to mitigate risk, determine reporting requirements, and developing corrective action plans when needed
• Demonstrated leadership and problem-solving skills, and ability to work under pressure
• Experience of communicating effectively with the highest levels of management and decision-making individuals within the organization
• Strong knowledge and experience in data security and privacy practices such as data sensitivity handling, data destruction, data stewardship, data management lifecycle, handling data breaches, etc.
• Strong understanding of data protection principles, data management lifecycle, information classification and data leak prevention technologies and capabilities
• Background and expertise in national data privacy law, IT Security regulation and Business continuity regulation compliance.
• Relevant work experience of monitoring compliance with regulatory requirement and engaging with regulatory bodies.
• Must demonstrate understanding of legal and regulatory matters affecting financial services industry