Data Protection & Legal Officer

Aceli Africa is a market-enabling facility that aims to mobilize over $600M in private sector lending for agricultural SMEs in East and Southern Africa by 2025. To achieve this goal, Aceli Africa provides financial incentives to increase the risk appetite of 30+ financial institutions (both global and local) to make loans ranging from USD $25K-$1.5M to inclusive agricultural SMEs while also facilitating technical assistance to expand the ability of high-potential SMEs to qualify for and manage financing. Financial incentives have been designed based on a dataset on the profitability of agri-SME lending that Aceli gathered and analyzed in collaboration with Dalberg Advisors.

Aceli launched in Kenya, Rwanda, Tanzania, and Uganda in September 2020 and is drawing upon learning to date and interest from partners to expand to Zambia in Q4 2023. To date Aceli Africa has secured US$65M in funding commitments, with its work across the region being funded by leading bilateral and philanthropic donors, including the Dutch Ministry of Foreign Affairs, IKEA Foundation, Swiss Agency for Development and Cooperation, UK Foreign, Commonwealth and Development Office, and USAID.

This role will ensure Aceli’s compliance with data protection and general legal requirements in each country of operation in Africa. It plays a critical role in safeguarding data and promoting a culture of legal compliance and best practices with respect to corporate governance.

Key Responsibilities

Data Protection and Compliance:

• Evaluate Aceli’s existing data protection framework to identify any areas of improvement and coordinate with senior leadership to develop and implement measures to ensure compliance with relevant data protection laws.
• Conduct regular data assessments to ensure on-going compliance.
• Collaborate with departmental heads to review data collection, use, storage, and disclosure processes, providing guidance on compliance matters, including consent procedures, risk management, and security measures.
• Engage third parties sharing data with Aceli to ensure data handling compliance.
• Manage data protection documentation and reporting requirements, including records of processing activities, privacy notices, and data incident records.
• Provide expert advice, conduct training for data protection for employees, and raise data protection awareness among all staff.
• Ensure registration with Data Protection Commissions in each country of operation.
• Maintain Aceli Africa’s Data Protection & Compliance quality standards through proactive audits and data impact assessments.
• Collaborate with departmental heads to review contractual documents with clients, employees, and third-party service providers to mitigate data protection risks.
• Develop incidence reporting systems.

Corporate Governance:

• Lead the timely registration of legal entities in each country of operations (currently five in Africa) and ensure statutory compliance.
• Review, negotiate, and draft various contracts and agreements.
• Conduct legal research and provide recommendations, templates, and plans to advise the organization on legal issues.
• Create policies, procedures, and systems related to legal compliance that are straightforward for staff to understand and implement.
• Serve as a resource for staff legal concerns and collaborate to find practical solutions to a range of legal questions.
• Ensure all trademarks are properly registered and updated, scan the environment and manage any processes arising from trademark infringement.
• Consult with and assist in managing outside counsel.
• Collaborate on organization-wide projects and perform any other assigned tasks by supervisor.

• Bachelor’s degree qualification in Law or equivalent.
• Advocate of the High Court.
• Master’s degrees preferably in Law or a related field preferred.
• Technical data strategy and protection certification standard such as certified information systems auditor (CISA) or equivalent is an added advantage.
• Minimum 1-2 years' experience in practical data protection, privacy policy, advocacy and implementation.
• Minimum 4-5 years’ professional experience working in a busy organization within a legal, audit and/or risk function department.
• Expertise in data protection and compliance laws, rules, regulations and risks and ability to engage at a strategic level with the Office of Data Protection Commissioner.
• Awareness of country-level regulatory requirements and international standards.
• Strong project management skills with a demonstrated record of the highest integrity and ethical conduct.
• Excellent verbal and written communication skills, with strong attention to detail.
• Great interpersonal skills and ability to work both independently and as part of a team.
• Commitment to and understanding of Aceli’s Vision, Mission, and Values.

The Global Development Incubator is an Equal Opportunity Employer and considers all applicants based on merit without regard to race, sex, color, national origin, religion, sexual orientation, age, marital status, veteran status, disability or any other characteristic protected by applicable law. East African nationals are strongly encouraged to apply.

If you believe you can clearly demonstrate your abilities to meet the relevant criteria for the role, please submit your application quoting in the subject line the Job Title “Data Protection & Legal Officer” , and attach your detailed CV, cover letter stating your interest in and qualifications for the position, e-mail address and telephone contacts. Applications that do not include a cover letter tailored to this position will not be considered. The application deadline is Monday,  November 20, 2023.