Data Protection Officer

Job Description

Requirements

• Bachelor degree in Law, Information Technology, Computer Science, or a related field
• Professional certification such as CIPP/E, CDPO, or CIPM from an accredited issuing body
• Excellent understanding of Data Privacy principles, risk management, and control frameworks
• Familiarity with data governance, data lifecycle management, and financial customer data handling
• Tech-savvy with familiarity of Data Governance software and tools
• Strong analytical, communication, and stakeholder management skills
• High ethical standards with strong organizational and documentation skills
• Ability to work collaboratively with cross-functional teams while taking initiative on assigned tasks

Responsibilities

• Develop, implement, and monitor adherence to Data Privacy policies, procedures, and controls including NDPA 2023, CBN regulations, and NDPC directives
• Ensure all obligations are met with respect to lawful processing, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality
• Maintain and regularly update the Record of Processing Activities (RoPA) and oversee the NDPC Data Protection Compliance Audit
• Coordinate and ensure timely, compliant responses to all Data Subject Access Requests (DSARs) and individual rights requests including access, rectification, erasure, restriction, objection, and portability
• Develop and enforce the Data Protection Policy, Privacy Notice, Cookie Policy, Retention Policy, and all supporting privacy documentation
• Conduct and review Data Protection Impact Assessments (DPIAs) for new products, systems, and vendors; facilitate identification and mitigation of data protection risks in collaboration with IT and Risk teams
• Execute privacy awareness campaigns and training across departments; monitor and interpret changes in Nigerian and international data protection laws
• Oversee third-party data processor due diligence and ensure Data Processing Agreements (DPAs) are in place with all vendors and partners
• Manage data breaches, maintain incident registers, and handle regulatory reporting to NDPC within statutory timelines; provide data protection oversight for BCP and DR programmes
• Serve as representative in all regulatory engagements with NDPC, NITDA, NCC, and other data-related regulatory bodies; manage all associated registrations, filings, and renewals