Data Protection Officer

Responsibilities:

• Serve as the company's designated Data Protection Officer.
• Advise management on obligations under the NDPA and applicable NDPC regulations and guidance.
• Develop and maintain data protection and privacy policies.
• Maintain a record of data-processing activities and data flows.
• Identify and assess privacy risks associated with DATA FAMILY's distributed data-storage architecture.
• Conduct or coordinate Data Protection Impact Assessments (DPIAs) where required.
• Monitor compliance with data protection policies and procedures.
• Support the handling of data-subject requests and privacy complaints.
• Assist with personal-data breach and incident-response procedures.
• Review Data Processing Agreements and third-party/sub-processor arrangements.
• Support NDPC registration, compliance audits and regulatory correspondence.
• Provide privacy awareness and training to staff and relevant contractors.
• Monitor developments in Nigerian data-protection legislation and NDPC guidance.

Requirement:

• Bachelor's degree in Law, Information Technology, Cybersecurity, Data Protection, Information Security, Computer Science, Business Administration or a related discipline.
• Demonstrable professional experience in data protection, privacy compliance, information security, legal compliance or a related field.
• Good working knowledge of the Nigeria Data Protection Act 2023 and applicable NDPC regulations/guidance.
• Understanding of data-controller and data-processor obligations.
• Knowledge of DPIAs, data-processing agreements, privacy policies, data-subject rights and personal-data breach management.
• Strong understanding of information-security principles, particularly where personal data is stored or processed digitally.
• Excellent written and verbal communication skills.
• Ability to work with technical, legal and management teams.
• Candidates should possess a recognised data-protection/privacy certification or relevant professional qualification.
• Candidates with credentials recognised/accepted by the Nigeria Data Protection Commission (NDPC) and experience working with an NDPC-licensed Data Protection Compliance Organisation (DPCO) will be particularly suitable.

Preferred Experience:

• Cloud or distributed data-storage environments.
• Cybersecurity and information-security governance.
• ISO 27001 or similar information-security frameworks.
• Technology companies/SaaS/cloud services.
• Data-processing agreements and third-party risk management.
• NDPC registration and compliance audits.
• Cross-border data transfers.
• Distributed/decentralised technology infrastructure.