DATA PROTECTION OFFICER (DPO)

We are seeking a qualified Data Protection Officer (DPO) to support the company's data protection and privacy compliance requirements in Nigeria for its DATA FAMILY data-storage and technology operations.

The successful candidate will be responsible for establishing, implementing and maintaining the company's data protection compliance framework in line with the Nigeria Data Protection Act (NDPA) and applicable Nigeria Data Protection Commission (NDPC) requirements.

Key Responsibilities

• Serve as the company's designated Data Protection Officer.
• Advise management on obligations under the NDPA and applicable NDPC regulations and guidance.
• Develop and maintain data protection and privacy policies.
• Maintain a record of data-processing activities and data flows.
• Identify and assess privacy risks associated with DATA FAMILY's distributed data-storage architecture.
• Conduct or coordinate Data Protection Impact Assessments (DPIAs) where required.
• Monitor compliance with data protection policies and procedures.
• Support the handling of data-subject requests and privacy complaints.
• Assist with personal-data breach and incident-response procedures.
• Review Data Processing Agreements and third-party/sub-processor arrangements.
• Support NDPC registration, compliance audits and regulatory correspondence.
• Provide privacy awareness and training to staff and relevant contractors.
• Monitor developments in Nigerian data-protection legislation and NDPC guidance.

Minimum Requirements

• Bachelor's degree in Law, Information Technology, Cybersecurity, Data Protection, Information Security, Computer Science, Business Administration or a related discipline.
• Demonstrable professional experience in data protection, privacy compliance, information security, legal compliance or a related field.
• Good working knowledge of the Nigeria Data Protection Act 2023 and applicable NDPC regulations/guidance.
• Understanding of data-controller and data-processor obligations.
• Knowledge of DPIAs, data-processing agreements, privacy policies, data-subject rights and personal-data breach management.
• Strong understanding of information-security principles, particularly where personal data is stored or processed digitally.
• Excellent written and verbal communication skills.
• Ability to work with technical, legal and management teams.
• Professional Certification
• Candidates should possess a recognised data-protection/privacy certification or relevant professional qualification.
• Candidates with credentials recognised/accepted by the Nigeria Data Protection Commission (NDPC) and experience working with an NDPC-licensed Data Protection Compliance Organisation (DPCO) will be particularly suitable.

Preferred Experience:

Experience with any of the following will be an advantage:

• Cloud or distributed data-storage environments.
• Cybersecurity and information-security governance.
• ISO 27001 or similar information-security frameworks.
• Technology companies/SaaS/cloud services.
• Data-processing agreements and third-party risk management.
• NDPC registration and compliance audits.
• Cross-border data transfers.
• Distributed/decentralised technology infrastructure.

Important

Applicants should provide copies/details of their relevant professional certifications and data-protection credentials for verification.

How to Apply:

Send your CV and relevant professional certifications/credentials to [email protected] with the subject line “Application – Data Protection Officer (DPO)''

Pay: From ₦400,000.00 per month

Work Location: Hybrid remote in Lagos