Job Description
Position: Senior Data Privacy Officer
Company: KPMG Malawi
Location: Mzuzu, Malawi
Experience: 8+ years in data privacy, compliance, or related fields
Education: Master’s degree in Law, Information Security, or related discipline
Employment Type: Full-time
Industry: Legal & Compliance
Department: Risk & Compliance
Salary: SSP 30,000,000 – SSP 45,000,000 per annum
Vacancies:1
Company Overview
KPMG Malawi is a leading member of the global network of professional services firms providing audit, tax and advisory solutions. With a strong presence across Africa, KPMG Malawi combines international expertise with deep local insight to help organisations navigate complex regulatory environments. The firm is committed to fostering a culture of integrity, innovation and inclusion, offering career pathways that empower professionals to make a meaningful impact. As part of its expansion strategy, KPMG Malawi is strengthening its data protection capabilities to support clients in meeting evolving privacy regulations across the continent.
Located in the vibrant city of Mzuzu, KPMG Malawi serves a diverse portfolio of clients ranging from multinational corporations to emerging local enterprises. The firm’s dedication to excellence has earned it a reputation as a trusted advisor in risk management, governance and compliance. By joining KPMG Malawi, you become part of a collaborative team that values continuous learning, ethical leadership and the delivery of high‑quality solutions that drive sustainable growth.
Job Overview
The Senior Data Privacy Officer will lead KPMG Malawi’s data protection initiatives, ensuring that client engagements and internal processes comply with the Malawi Data Protection Act, GDPR, and other relevant international standards. This role involves advising senior leadership, designing privacy frameworks, conducting impact assessments, and delivering training programs that embed a privacy‑by‑design mindset across the organisation. The successful candidate will act as the primary point of contact for regulatory bodies, manage data breach responses, and champion a culture of data stewardship.
For more information about KPMG Malawi’s career opportunities, visit our main portal at https://malawijobsearch.com.
Explore regional opportunities in South Sudan at https://southsudanjobsearch.com/job-vacancy-south-sudan/.
Discover additional roles across Southern Africa at https://zimbabwejobsearch.com/.
Key Responsibilities
- Develop, implement and maintain a comprehensive data privacy program aligned with local and international regulations.
- Conduct Data Protection Impact Assessments (DPIAs) for new projects, products and services.
- Provide expert guidance to clients on privacy compliance, cross‑border data transfers and consent management.
- Lead incident response activities, including breach investigations, reporting to authorities and remediation planning.
- Collaborate with legal, IT security, and business units to embed privacy controls into system architectures.
- Monitor regulatory developments and update policies, procedures and training materials accordingly.
- Prepare and present privacy reports to senior management and board committees.
- Represent KPMG Malawi in industry forums, workshops and regulatory consultations.
Required Skills
- In‑depth knowledge of the Malawi Data Protection Act, GDPR, CCPA and other global privacy frameworks.
- Strong analytical and risk assessment capabilities.
- Excellent communication skills, capable of translating complex legal concepts into practical business advice.
- Proficiency in privacy‑by‑design methodologies and data mapping tools.
- Experience with incident response, forensic investigation and regulatory reporting.
- Leadership qualities with the ability to influence cross‑functional teams.
- Professional certifications such as CIPP/E, CIPM, or ISO 27701 preferred.
Education
A Master’s degree in Law, Information Security, Computer Science, or a related field is required. Relevant certifications and continuous professional development in data privacy are highly valued.
Experience
Minimum of eight years of experience in data privacy, compliance, legal advisory or information security, preferably within a consulting or professional services environment. Demonstrated experience managing large‑scale privacy programs and leading multidisciplinary teams is essential.
Salary
The compensation package ranges from SSP 30,000,000 to SSP 45,000,000 per annum, commensurate with experience and qualifications. The package includes performance‑based bonuses and comprehensive benefits.
Benefits
- Competitive salary with annual performance incentives.
- Health insurance covering employee and dependents.
- Retirement savings plan.
- Generous paid leave and parental leave policies.
- Professional development allowance and certification support.
- Flexible working arrangements and remote work options.
Training
- Access to KPMG’s global learning platform for continuous skill enhancement.
- On‑the‑job mentorship from senior privacy and compliance leaders.
- Opportunities to attend international conferences and workshops on data protection.
- Internal privacy certification programs tailored to regional regulatory requirements.
Working Environment
KPMG Malawi offers a collaborative, inclusive and technology‑enabled workplace. Our modern office in Mzuzu provides state‑of‑the‑art facilities, meeting rooms equipped for virtual collaboration, and a supportive culture that encourages innovation and work‑life balance.
Application Process
Interested candidates should submit their updated CV and a cover letter outlining their relevant experience through the online application portal on our website. Applications will be reviewed on a rolling basis, and shortlisted candidates will be invited for a virtual interview followed by an on‑site assessment.
Equal Opportunity Statement
KPMG Malawi is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of gender, race, disability, religion, sexual orientation or any other characteristic protected by law.