Head, Data Protection at Moniepoint Incorporated Full Time

Job Title: Head, Data Protection

Location: Lagos

About the Role

• The Head, Data Protection provides expertise and support in data privacy and protection matters, ensuring compliance with regulatory requirements such as the Nigerian Data Protection Act (NDPA) 2023 and other relevant data protection laws.
• The DPO oversees the entire data protection strategy, driving the implementation of policies and procedures that safeguard personal data and maintain the organization’s reputation for data security.
• The DPO is also responsible for managing the organization’s compliance framework, including conducting Data Protection Impact Assessments (DPIAs) and overseeing data breach response efforts.

Responsibilities
What you will get to do:

• Implement a data privacy governance framework (including Binding Corporate Rules) to manage data use in compliance to Nigeria Data Privacy Act (NDPA) 2023.
• Set standards, formulate policies and procedures for the organization to meet NDPA  2023 and other relevant regulations and requirements.
• Ensure that employees, third-party processors (TPPs), vendors, and data subjects are informed about their data protection rights, obligations and responsibilities.
• Handle queries, complaints, claims, and notifications from regulators, law enforcement agencies, data subjects, and ensure prompt feedback and resolutions.
• Serve as the primary point of contact and liaison for Nigeria Data Privacy Commission (NDPC), other regulators, financial institutions, and customers on data privacy and protection-related matters.
• Work with product managers, project managers, and other internal stakeholders to conduct data privacy impact assessments (DPIAs) to ensure compliance with NDPA 2023 and extant regulations.
• Collaborate with IT teams to ensure that IT systems and procedures comply with NDPA, and other relevant regulations.
• Collaborate with the information security team to maintain records of customers data, data processing activities, maintain data security management plan, data breach response plan, data retention structures and processes.
• Develop strategies to ensure engagement with key internal and external stakeholders, and delivery of data privacy training to the various business functions, TPPs, vendors, and data subjects.
• Coordinate and conduct privacy audits including review of privacy governance framework.
• Work with Moniepoints MFB Data Privacy Compliance Organization (DPCO) to conduct external regulatory audits and provide guidance and advice on privacy-related regulatory issues.
• Monitor changes to local data privacy laws and regulations and make recommendations to top management when appropriate.

Qualifications

• A Bachelor’s Degree in Law, Information Technology, Computer Science, Business Administration, or a related field. Master’s degree in information security, or law with relevant certification in data protection/privacy (CISSP, CIPM, CIPP, CPT, CDPSE, CDPO, etc) is preferred.
• Minimum of 5 years experience in data protection, compliance, or a related field, with a strong understanding of the NDPA and other relevant data protection laws.
• Proven track record of managing data privacy in a complex organizational setting, including experience with conducting data protection audits, DPIAs, and data breach response management.
• Strong competencies in regulatory insight, analytical skills, ethical integrity, effective communication, and leadership.

What we can offer you

• Culture – We put our people first and prioritise the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.
• Learning – We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
• Compensation – You’ll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits.

Application Closing Date
Not Specified.

• A preliminary phone call with the recruiter
• A technical panel interview with Department Leads
• A behavioral and technical interview with a member of the Executive team
• All interviews stages are Virtual.