Data Protection Officer

Job summary

We are seeking a qualified Data Protection Officer (DPO) to support the company's data protection and privacy compliance requirements in Nigeria for its DATA FAMILY data storage and technology operations. The successful candidate will be responsible for establishing, implementing, and maintaining the company's data protection compliance framework

Min Qualification: Degree Experience Level: Mid level Experience Length: 4 years Language Requirement: English Working Hours: Full Time - 8 to 5 Applicant Location: Nigeria

Job descriptions & requirements

Responsibilities:

• Serve as the company's designated Data Protection Officer.
• Advise management on obligations under the NDPA and applicable NDPC regulations and guidance.
• Develop and maintain data protection and privacy policies.
• Maintain a record of data-processing activities and data flows.
• Identify and assess privacy risks associated with DATA FAMILY's distributed data-storage architecture.
• Conduct or coordinate Data Protection Impact Assessments (DPIAs) where required.
• Monitor compliance with data protection policies and procedures.
• Support the handling of data-subject requests and privacy complaints.
• Assist with personal-data breach and incident-response procedures.
• Review Data Processing Agreements and third-party/sub-processor arrangements.
• Support NDPC registration, compliance audits and regulatory correspondence.
• Provide privacy awareness and training to staff and relevant contractors.
• Monitor developments in Nigerian data-protection legislation and NDPC guidance.

Requirement:

• Bachelor's degree in Law, Information Technology, Cybersecurity, Data Protection, Information Security, Computer Science, Business Administration or a related discipline.
• Demonstrable professional experience in data protection, privacy compliance, information security, legal compliance or a related field.
• Good working knowledge of the Nigeria Data Protection Act 2023 and applicable NDPC regulations/guidance.
• Understanding of data-controller and data-processor obligations.
• Knowledge of DPIAs, data-processing agreements, privacy policies, data-subject rights and personal-data breach management.
• Strong understanding of information-security principles, particularly where personal data is stored or processed digitally.
• Excellent written and verbal communication skills.
• Ability to work with technical, legal and management teams.
• Candidates should possess a recognised data-protection/privacy certification or relevant professional qualification.
• Candidates with credentials recognised/accepted by the Nigeria Data Protection Commission (NDPC) and experience working with an NDPC-licensed Data Protection Compliance Organisation (DPCO) will be particularly suitable.

Preferred Experience:

• Cloud or distributed data-storage environments.
• Cybersecurity and information-security governance.
• ISO 27001 or similar information-security frameworks.
• Technology companies/SaaS/cloud services.
• Data-processing agreements and third-party risk management.
• NDPC registration and compliance audits.
• Cross-border data transfers.
• Distributed/decentralised technology infrastructure.