Data Protection Officer

About the role

Koloxo West Africa is looking for a Data Protection Officer to lead its privacy and data‑protection programme in Nigeria. The role will advise senior management on obligations under the Nigeria Data Protection Act (NDPA) and ensure compliance across the organisation.

Key responsibilities

• Advise management on NDPA obligations and related NDPC guidance.
• Develop, maintain and enforce data‑protection and privacy policies.
• Maintain a record of data‑processing activities and data flows.
• Identify and assess privacy risks in the company’s distributed data‑storage architecture.
• Conduct or coordinate Data Protection Impact Assessments (DPIAs) where required.
• Support data‑subject requests, privacy complaints and personal‑data breach response procedures.

Required profile

• Bachelor’s degree in Law, IT, Cybersecurity, Data Protection, Information Security, Computer Science, Business Administration or a related field.
• Minimum 4 years of professional experience in data protection, privacy compliance, information security or legal compliance.
• Strong working knowledge of the Nigeria Data Protection Act 2023 and NDPC regulations.
• Excellent written and verbal communication skills and ability to work with technical, legal and management teams.
• Relevant data‑protection or privacy certification recognised by the NDPC.

Required skills

• ISO 27001
• Cloud or distributed data‑storage environments
• Cybersecurity governance
• Information‑security principles