Group Principal Privacy & Digital Business Auditor

Airtel Africa is seeking a Group Principal Privacy & Digital Business Auditor to provide independent assurance and practical advisory insight over privacy, data protection, home broadband and digital business risks across Group and operating company environments. The role will lead complex, multi-country audits, translate regulatory and technical requirements into clear control expectations, and influence senior stakeholders to deliver sustainable remediation.

Required Experience and Qualifications

• Bachelor’s degree in Business, Information Systems, Law, Accounting, Engineering or a related discipline.
• 6–10 years’ relevant experience, including at least 4 years in internal audit, external audit, risk or compliance within telecommunications, technology, financial services or a Big 4 environment.
• Experience leading data privacy or data protection audits in a multi-jurisdiction environment.
• Practical exposure to telecom, ISP, fixed broadband, FTTH or fixed wireless access operations is preferred.
• Relevant professional certification such as CIPP/E, CIPM, CIPT, CISA, CIA, CISM, CRISC, ISO 27701 / 27001 Lead Auditor, ACCA or CPA.

Key Competencies

• Strong privacy, data protection and regulatory judgement.
• Digital and data fluency, with the ability to understand data flows, platforms and technology-enabled business models.
• Excellent audit execution, analytical and report-writing skills.
• Ability to influence senior stakeholders and drive practical, sustainable remediation.
• High integrity, independence, ownership and delivery discipline.
• Coaching mindset and ability to build capability across diverse teams

• Plan and lead risk-based audits over data privacy, data protection, home broadband, fixed and digital business processes.
• Assess compliance with applicable data protection laws, Airtel’s Group Privacy Policy and regulatory obligation management requirements.
• Evaluate controls over personal data handling, including collection, consent, lawful basis, retention, access, transfer, storage and deletion.
• Review privacy governance activities such as RoPA, DPIA, privacy notices, consent mechanisms and data subject request handling.
• Audit home broadband and fixed business controls covering network roll-out, provisioning, billing, revenue assurance, partner management, customer experience and service quality.
• Deliver management reviews and advisory engagements on emerging risks, transformation initiatives and recurring control issues.
• Prepare clear, business-focused audit reports and Board / Audit & Risk Committee reporting inputs.
• Coach audit teams, co-sourced specialists and OpCo stakeholders to strengthen privacy, digital risk and audit capability.