Legal, Compliance & Data Protection Officer job at CIC General Insurance Uganda | Apply Now

Compliance

• Develop an appropriate Compliance Management framework, methodology and process to ensure compliance with all the set-up regulations.

• Provide high quality Compliance advice to Business and Support functions on applicable internal policies, laws and regulations

• In-charge Anti-money laundering compliance especially; client due diligence, KYC standards, internal policies and local regulations

• Performing real time surveillance and support with a view to prevent misconduct, promote ethical standards, monitor and advise on rules.

• Provide in depth analysis on changes to regulations and provide support to the Business on implementation

• Carry out compliance monitoring and perform ad hoc investigations into matters or issues that are escalated to Compliance

• Prepare draft operational policies to assist in compliance with laws and regulation for management approval.

• Coordinate submission of regulatory returns

• Prepare compliance reports for Management and the Board.

Data Protection

• Establish the Data Protection framework, implementation plan, and development of policies including developing templates for data collection and assisting with data mapping.

• Guide the various subsidiaries and departments on the implementation of the Data Privacy requirements and support them to ensure compliance.

• Create and maintain a register on comprehensive records of all data processing activities.

• Train stakeholders involved in data collection/processing and update the training requirements.

• Conduct reviews to ensure compliance, accountability and to address potential issues proactively.

• Ensure that IT systems and procedures comply with all relevant data privacy and protection law, regulation and policy.

• Support in preparation of privacy statements for each processing operation and ensure the statements are provided to the data subjects.

• Collaborate with the Information Security function to maintain records of all data assets, exports and data security incident management plan to ensure timely remediation of incidents.

• Create Information Base for privacy statements, Data Protection guidelines, quality assurance reports, Data Protection periodic reports.

• Serve as the point of contact between the company and the Regulatory Authorities and co-operating with them during inspections.

• Interface with data controllers and data subjects to inform them about the use of their data, their data protection rights, obligations, responsibilities.

• Provide quarterly status updates to senior and middle management and drawing immediate attention to any failure to comply with the applicable data protection rules.

Legal & Company Secretarial

• Provide technical support to the Company Secretary including organizing Board & management meetings, circulation of Board papers and minutes taking as and when required.

• Drafting correspondences, prepare reports and proof-read documents as assigned.

• Coordinate with external Counsel in availing required documentation and support with respect to Court Cases handled on behalf of the Company

• Represent the Company in legal matters before Courts of Law where required

• Draft and review Agreements, Contracts, and other legal documents as and when assigned.

• Carry out legal research and provide reasoned legal opinion.

• Continuous sensitization of staff of the policies, regulations and standards to be complied with.

• Attend and actively participate in periodic meetings of the Legal Department, and take actions arising from the meetings.