Data Protection Officer

Responsibilities:

Serve as the company's designated Data Protection Officer. Advise management on obligations under the NDPA and applicable NDPC regulations and guidance. Develop and maintain data protection and privacy policies. Maintain a record of data-processing activities and data flows. Identify and assess privacy risks associated with DATA FAMILY's distributed data-storage architecture. Conduct or coordinate Data Protection Impact Assessments (DPIAs) where required. Monitor compliance with data protection policies and procedures. Support the handling of data-subject requests and privacy complaints. Assist with personal-data breach and incident-response procedures. Review Data Processing Agreements and third-party/sub-processor arrangements. Support NDPC registration, compliance audits and regulatory correspondence. Provide privacy awareness and training to staff and relevant contractors. Monitor developments in Nigerian data-protection legislation and NDPC guidance.

Requirement:

Bachelor's degree in Law, Information Technology, Cybersecurity, Data Protection, Information Security, Computer Science, Business Administration or a related discipline. Demonstrable professional experience in data protection, privacy compliance, information security, legal compliance or a related field. Good working knowledge of the Nigeria Data Protection Act 2023 and applicable NDPC regulations/guidance. Understanding of data-controller and data-processor obligations. Knowledge of DPIAs, data-processing agreements, privacy policies, data-subject rights and personal-data breach management. Strong understanding of information-security principles, particularly where personal data is stored or processed digitally. Excellent written and verbal communication skills. Ability to work with technical, legal and management teams. Candidates should possess a recognised data-protection/privacy certification or relevant professional qualification. Candidates with credentials recognised/accepted by the Nigeria Data Protection Commission (NDPC) and experience working with an NDPC-licensed Data Protection Compliance Organisation (DPCO) will be particularly suitable.

Preferred Experience:

Cloud or distributed data-storage environments. Cybersecurity and information-security governance. ISO 27001 or similar information-security frameworks. Technology companies/SaaS/cloud services. Data-processing agreements and third-party risk management. NDPC registration and compliance audits. Cross-border data transfers. Distributed/decentralised technology infrastructure.