Data Protection Officer

Since 2005, ICD has supplied enterprise servers, storage, networking parts and data centre maintenance to businesses in Egypt, the Gulf, Africa and beyond.

ICD handles the personal data of customers, suppliers and employees in Egypt, the UAE, Kenya and beyond, and its EKODAQ arm sanitises data-bearing equipment for customers. The Data Protection Officer makes sure that data is handled lawfully and that ICD can demonstrate it.

• Build and maintain ICD's data protection programme under Egyptian Law 151/2020, the Kenya Data Protection Act 2019 and the UAE PDPL.
• Maintain records of processing activities and data maps for every business function and country.
• Lead data protection impact assessments for new systems, vendors and processes, including ERPNext changes.
• Handle data subject requests and coordinate responses within legal deadlines.
• Manage personal data breach procedures, from assessment to notifying regulators where required.
• Review contracts and data processing agreements with legal counsel, including cross-border transfers.
• Train staff on privacy and data handling, and advise EKODAQ on chain-of-custody and sanitisation records.
• Act as the contact point for regulators, including registration and licensing with Egypt's Personal Data Protection Center and Kenya's ODPC.

• Degree in law, information security, computer science or a related field.
• At least five years in data protection, privacy compliance or information security governance.
• Working knowledge of Egyptian Law 151/2020 and of at least one of the Kenyan, UAE or EU (GDPR) frameworks.
• Experience running records of processing, impact assessments and breach response.
• Ability to explain legal requirements clearly to technical and commercial teams.
• Independence, integrity and sound judgement on confidential matters.

• A privacy certification such as CIPP/E, CIPM or CDPO.
• Familiarity with ISO/IEC 27001 and ISO/IEC 27701.
• Knowledge of data sanitisation standards such as NIST SP 800-88.
• Experience with privacy controls in ERP or CRM systems.

Professional English and Arabic; French is an advantage.

Occasional travel to Dubai and Nairobi.