Title: Data Protection Officer

Reporting to: Legal Manager

Direct reports: None

Location: Nairobi 

About Food for Education 

Food for Education (F4E) is an African-led, women-led social enterprise that uses technology, smart operations, and logistics to provide low-cost, high-quality meals that improve nutrition and education outcomes for primary school children in Kenya.

We are growing quickly. Our mission is to scale models that prioritise efficient supply chain management and sustainable sourcing, so we can continue lowering the cost of school lunches. We have delivered over 78,000,000 meals since 2012 and are expanding to reach our goal of serving at least 1 Million public primary school students in Kenya every day by 2027. 

Our Values

At Food for Education, our values are guiding principles that provide us with purpose and direction and set the tone for our interactions with all stakeholders:

• Build with excellence and curiosity: We’re not afraid to try new things and iterate as much as we can to find the best and most efficient way to get results; 
• Be the change you seek: We acknowledge that continuous improvement is a shared responsibility; 
• We do what we say; and say what we do: We embrace an ownership mentality;
• Ask why; and commit: Share openly, question respectfully, and commit fully. When we understand the why, we can work with a purpose.

About the Role

The Data Protection Officer (DPO) will be responsible for ensuring the organization complies with the Data Protection Act, 2019, and any other applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR). The DPO will be managing and overseeing all data protection-related matters within the organization.

Key Responsibilities

• Undertake periodic audits to ensure compliance with Data protection laws.
• Develop and implement data protection policies, procedures, and guidelines in line with the Data Protection Act, and any other applicable laws.
• Conduct Data Protection Impact Assessments to assess the privacy risks of new projects and technologies.
• Advise on data protection compliance across all departments within the organization.
• Provide training and awareness programs to employees on data protection best practices.
• Handle data subject access requests and other data protection-related requests.
• Monitor and respond to data breaches and security incidents.
• Ensure registration is up to date, and liaise with relevant authorities on data protection matters.
• Manage any queries from the Office of the Data Protection Commission relating to data protection for the organisation.
• Advise the organisation of any changes in data protection legislation and the impact those changes may have on the organisation.
• Generally manage organizational risks on data handling.

Qualifications and experience

• A Degree in Law and any other relevant degree
• Certification as a Data Protection Officer
• 3 years experience as a Data Protection Officer or a similar position. 
• Strong understanding of data protection laws and regulations.
• Excellent communication, interpersonal, and organizational skills.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.

We are an equal-opportunity employer 

All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations, and ordinances. 

Career Growth and Development 

We have a strong culture of constant learning and we invest in developing our people. You will have weekly check-ins with your manager, and regular feedback on your performance. We hold career reviews every six months and set aside time to discuss your aspirations and career goals. You will have the opportunity to shape a growing organisation and build a rewarding, long-term career.

We aim to contact all our applicants, but due to the high volume of applications only shortlisted candidates are contacted. If you do not hear from us within two weeks your application might not be successful on this occasion. This does not mean you will not be considered for future roles so please keep an eye on our job board and apply for positions that match your skills and experience.