Data Protection and Privacy Officer

Career Opportunity: Data Protection and Privacy Officer Reports to: Head of Information Security Department: Information Security

Location:
Kigali, Rwanda Application Deadline: October 30th, 2026, by 6:00PM Office

Location:
Kigali Plot 314, Avenue de la Paix About Ecobank Ecobank is the leading pan-African banking group, operating in 34 African countries, with 4 representative offices outside Africa: Paris, London, Dubai, and Beijing. We are committed to driving financial integration and economic transformation through accessible, innovative, and inclusive banking solutions. In Rwanda, we play an essential role in enabling businesses to grow, trade, and thrive in a rapidly evolving economy. Our Values – We RACE IT Our culture is rooted in a shared set of values that define how we work, lead, and grow together:
• Respect: We treat others with dignity and listen actively.
• Accountability: We own our responsibilities and deliver on our promises.
• Customer Centricity: We put clients at the heart of every decision.
• Excellence: We strive for high performance and impactful results.
• Integrity: We do the right thing—always.
• Teamwork: We believe in collaboration across teams, countries, and cultures. Together, we RACE IT — with courage, purpose, and a shared vision for a stronger Africa. About the opportunity: Ecobank Rwanda is seeking a Data Protection and Privacy Officer to oversee data protection and privacy compliance across the Bank. Under the supervision of the Head Information Security, the Data Protection & Privacy Officer will drive compliance of enterprise information by identifying and mapping data; determine data protection and privacy requirements; prescribe security controls, prepare plans, assess all data held in all business systems; prepare/update data protection and privacy standards, prepare technical security policies, and procedures associated with data classifications. If you believe you have what it takes to uphold these standards and contribute meaningfully to our operational excellence, we encourage you to apply and become part of our dedicated team.

Key Responsibilities
• Creating and maintaining data protection and privacy policies, procedures and practices (Record of Processing documentation, review of data processing agreements, privacy by design, etc.)
• Conducting data protection impact assessments and advice on issues where applicable.
• Ensuring information security activities aligns with data protection and privacy requirements.
• Interfacing with appropriate data protection regulatory authorities on compliance with data protection regulations.
• Monitoring compliance with data protection regulations, other applicable data protection provisions and strategies for protection of personal data, including the allocation of responsibilities, awareness-raising and training of staff (e.g.: Human Resources) involve in the processing operations and related verifications.
• Interfacing with appropriate internal and external stakeholders in Legal, Compliance and Technology to adhere to legal, contractual and supervisory authorities.
• Embedding data protection and privacy requirements into technology services and new projects where applicable.
• Maintaining data protection and privacy governance structure within the affiliate.
• Ensuring data protection and privacy issues are addressed at appropriate meetings within the affiliate
• Carry out routine tasks associated with data protection & privacy
• Ensure privacy technologies and capabilities are embedded in all applicable/relevant solutions and projects
• Liaises with contractors and service providers to ensure that all activities are in line with the Banks Information Security Policy and regulatory Business continuity requirement.
• Provides Information Security and privacy Awareness training to all employees, and other third parties, ensuring proper information security clearance in accordance with established bank information security policies and procedures.
• Initiates, facilitates, and promotes activities to create information security and privacy awareness within the Bank.
• Develop and implement an ongoing risk assessment program targeting information protection& privacy and business systems. Recommend methods for vulnerability detection and remediation.
• Perform information security risk, vulnerability assessments and serves as an internal assessor for data protection and privacy issues.
• Report any incident occurred and address security incidents, respond to alleged policy violations from staff, contractors and external parties.
• Review of physical and logical protection of Information and ensure logical access management review is done, and any non-conformity is reported
• Carry out any other responsibilities that may be assigned by Management Key relationships: Internal:
• All departments Who We’re Looking For: Qualifications & Experience
• Bachelor’s degree in computer science, Information Technology, MIS or Information Security and professional qualifications preferably in cybersecurity/data protection such as ISO 27001 lead Implementor, CDSPE, ISO 27701 Lead Implementor, CIPT (a Plus)
• Minimum of 3 years’ experience in the information security/cybersecurity/data protection roles with some experience in the financial services sector.
• Background and expertise data protection & Privacy compliance, IT audit or IT security
• Experience of promoting a data privacy culture of awareness and understanding (preferably within a Bank)
• Experience of developing and accessing privacy policies and controls that minimize risk and ensure compliance
• Experience of responding to potential privacy incidents, to mitigate risk, determine reporting requirements, and developing corrective action plans when needed
• Demonstrated leadership and problem-solving skills, and ability to work under pressure
• Experience of communicating effectively with the highest levels of management and decision-making individuals within the organization
• Strong knowledge and experience in data security and privacy practices such as data sensitivity handling, data destruction, data stewardship, data management lifecycle, handling data breaches, etc.
• Strong understanding of data protection principles, data management lifecycle, information classification and data leak prevention technologies and capabilities
• Background and expertise in national data privacy law, IT Security regulation and Business continuity regulation compliance.
• Relevant work experience of monitoring compliance with regulatory requirement and engaging with regulatory bodies.
• Must demonstrate understanding of legal and regulatory matters affecting financial services industry.
• Team-player such that focus on the success of the team. Working well both with others, as well as individually, in a multicultural and multidisciplinary context
• Knowledge of data protection legislation, particularly GDPR and national data protection law.
• Experienced in Business Continuity management framework/standard.
• Familiarity with computer security systems
• Experience in managing data breaches
• Experience in cooperation with supervisory authorities of any kind
• Understanding the environment in which business operates and associated data protection risks.
• Experience in conducting data protection impact assessments.
• Understanding the national Data protection law and its requirements
• Must be able to balance business priorities, information security risks, emerging data threats and best practice of data protection & privacy to ensure confidentiality, integrity, and availability of the company’s information assets.
• Monitoring and advising on the initial and ongoing data protection risk assessments (privacy impact assessments) to ensure that personal data is protected.
• Ability to work in a multicultural environment and multi-task effectively
• Excellent written and verbal communication skills.
• Able to learn new concepts, products and technologies on the job.
• Must demonstrate strong leadership skills as well as be able to effectively work collaboratively and cross-functionally with members of the IT organization and various lines of businesses. Personal Attributes
• Demonstrate high integrity
• Have a great sense of accountability and responsibility
• Confidentiality What You’ll Get
• An inclusive and growth-driven workplace.
• Regional exposure and career development opportunities.
• Performance-based incentives and a supportive team culture.
• The chance to make a meaningful contribution to Rwanda’s corporate banking space. To Apply Submit your application by October 30th, 2026, by 6:00PM via our career portal. Diversity, Equity & Inclusion Commitment Ecobank is committed to providing equal opportunities to all and fostering an inclusive and diverse workplace. To this end, we encourage applications from individuals regardless of their nationality, race, gender, age, social class, religion, beliefs, and disability while fully adhering to the local laws and regulations established where Ecobank operates. Women are strongly encouraged to apply. We ensure fair treatment and equal opportunity at every step of our recruitment process. Recruitment Integrity
• Only shortlisted candidates will be contacted.
• Employment is conditional upon successful background checks and verification.
• All offers of employment are subject to satisfactory references.