Data Protection Officer (DPO)

Phillips Outsourcing Limited is hiring a Data Protection Officer (DPO) to lead privacy governance, data protection compliance and engagement with the Nigeria Data Protection Commission (NDPC) across the organisation

Job Details

• Location: Lekki, Lagos
• Work Mode: On-site
• Employment Type: Full-time

Responsibilities

• Advise the Board, management, employees and process owners on data protection obligations and privacy-by-design requirements
• Maintain the privacy governance framework, records of processing activities, privacy notices, data retention standards and data-subject-rights procedures in collaboration with relevant business owners
• Monitor compliance through risk-based reviews, evidence checks, staff training, awareness programmes and tracking of corrective actions
• Advise on and monitor Data Protection Impact Assessments (DPIAs) for high-risk processing activities, new clients, products, ERP changes, biometrics, surveillance, international transfers and emerging technologies
• Advise on controller and processor roles, contractual arrangements, third-party due diligence, international data transfers and processor oversight, seeking legal advice where necessary
• Coordinate the assessment and escalation of personal data incidents and breaches, including documentation and advice on regulatory and data-subject notifications
• Serve as a key contact point for the NDPC, data subjects, clients and other authorised stakeholders on privacy-related matters
• Report material privacy risks, data incidents, systemic non-compliance and resource limitations to the appropriate management or governance structures

Requirements

• Bachelor's degree in Law, Information Technology, Cybersecurity, Information Management, Business or a related field
• 7-10 years of experience in privacy, legal/compliance, information governance, cybersecurity governance or risk management, including substantial responsibility for data protection and privacy management
• Relevant professional qualifications such as CIPP/E, CIPM, CIPT, ISO 27701/27001, CISA or a legal qualification, alongside Nigerian data protection training or certification
• Practical knowledge of the Nigeria Data Protection Act (NDPA) and guidance issued by the NDPC
• Strong technical knowledge of privacy governance, records of processing activities, DPIAs, data-subject rights, incident management, processor relationships, contracts, data retention and information security concepts

How to Apply

Fill out the form on the website below