Data Protection Officer (DPO)

About the role

LunaVax Institute Nigeria is seeking a certified Data Protection Officer to establish and oversee the data protection framework for a Phase III vaccine implementation study. The DPO will work independently, reporting to management and collaborating with research, technical, regulatory and operations teams.

Key responsibilities

• Advise on NDPC registration and ongoing compliance with the Nigeria Data Protection Act 2023 and GAID 2025.
• Lead and independently sign off Data Privacy Impact Assessments (DPIAs) in line with GAID 2025.
• Provide guidance on lawful bases, consent, privacy notices, data minimisation and retention for children’s health and biometric data.
• Review data processing agreements, advise on cross‑border transfers and manage relationships with research partners and technology providers.
• Oversee data‑security measures, breach‑response procedures and data‑subject‑rights handling.
• Develop, maintain and document data‑protection policies, procedures and periodic reports for management.
• Support compliance audit returns and other regulatory reporting requirements.
• Train staff and field teams on data‑protection best practices.

Required profile

• Current DPO certification meeting NDPC requirements, with verifiable training and examination credentials.
• Enrolment on the NDPC DPO database, or eligibility for enrolment.
• Strong working knowledge of the NDPA 2023 and GAID 2025.
• Practical experience conducting DPIAs and handling sensitive personal data.
• Ability to work independently while maintaining confidentiality.
• No conflict of interest with LunaVax Institute’s processing activities.

Required skills

• Advising on NDPC registration and data‑protection compliance.
• Leading and vetting DPIAs.
• Reviewing data‑processing agreements and managing cross‑border data transfers.
• Overseeing data‑security, breach response and data‑subject‑rights procedures.
• Developing and maintaining data‑protection policies and documentation.
• Preparing periodic data‑protection reports for senior management.
• Delivering training on data‑protection practices to staff and field teams.

What we offer

• Opportunity to shape the data‑protection framework for a pioneering vaccine implementation study in Nigeria.
• Hands‑on experience with children’s health data, biometric verification and digital health systems.
• Collaboration with research, technical, regulatory and global‑health partners.
• Flexible, part‑time contract with potential to grow as programmes expand.
• Retainer or stipend compensation, discussed based on experience, certification and scope.