I’m looking to step into a dedicated data privacy and GRC role where I can apply my experience at greater depth and scale—owning privacy compliance end to end, managing incidents, strengthening governance, and partnering confidently with regulators.
Joy Ireri
@joyireri
Data privacy & GRC professional protecting customer data through practical compliance.
What I'm looking for
I am a data privacy and GRC professional with over 10 years of experience in Kenya's CBK-regulated banking sector. Throughout my career, I have taken personal ownership of compliance—so it protects customers and the institution, not just satisfies requirements.
In my current role as Branch Operations Manager, I ensure customer and staff personal data is collected and processed lawfully under the Kenya Data Protection Act 2019 and internal policies. I run branch data protection compliance reviews, manage data incidents end to end, maintain data retention schedules, and deliver privacy awareness training to up to 15 staff, while supporting engagement with the Office of the Data Protection Commissioner.
I also lead risk, audit, and regulatory compliance by owning the branch risk register, preparing for CBK inspections and internal audits, and translating regulatory updates into practical process changes. I enjoy building a compliance culture by aligning controls, segregation of duties, and customer onboarding standards (KYC/AML/CBK due diligence), and I am now deepening my privacy governance specialization through my CDPSE.
Experience
Work history, roles, and key accomplishments
Branch Operations Manager
Sidian Bank
Jan 2021 - Present (5 years 5 months)
Owned day-to-day branch data privacy and compliance under the Kenya Data Protection Act 2019, managing lawful processing, retention schedules, and end-to-end data incident containment. Led branch compliance reviews, trained up to 15 staff, maintained the risk register, supported CBK/ODPC engagements, and contributed to audit outcomes with no adverse findings.
Service Delivery Officer
Sidian Bank
Jan 2016 - Jan 2021 (5 years)
Processed customer account applications and daily transactions with strict KYC/CDD controls, ensuring customer information was accurate, complete, and securely stored. Prepared documentation for audits, improved customer verification and transaction authorization workflows, and reinforced staff awareness of data handling and confidentiality.
Education
Degrees, certifications, and relevant coursework
ISACA
Certified Data Privacy Solutions Engineer (CDPSE), Data Privacy Solutions Engineering
Currently a CDPSE candidate (in progress) with ISACA.
ISC2
Certified in Cybersecurity (CC), Cybersecurity
Certified in Cybersecurity (CC) from ISC2 (2024).
ISACA
Certified Information Systems Auditor (CISA), Information Systems Audit
Certified Information Systems Auditor (CISA) from ISACA (2024).
CIPIT, Strathmore University
Data Protection Practitioner Certificate, Data Protection
Completed a Data Protection Practitioner Certificate through CIPIT at Strathmore University (2023).
Meru University
Bachelor of Business Information Technology, Business Information Technology
2011 - 2015
Earned a Bachelor of Business Information Technology (BBIT) from Meru University, Kenya from 2011 to 2015.
Availability
Location
Authorized to work in
Salary expectations
Job categories
Interested in hiring Joy?
You can contact Joy and 90k+ other talented remote workers on Himalayas.
Message JoyFind your dream job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
