Data Protection Officer (Part‑time, Remote – Nigeria)

About the role

LunaVax Institute Nigeria is seeking a certified Data Protection Officer to lead data‑privacy compliance for a Phase III vaccine implementation study. The DPO will work independently, reporting to senior management, and will ensure adherence to the Nigeria Data Protection Act 2023 and related directives.

Key responsibilities

• Advise on NDPC registration and maintain ongoing compliance workstreams.
• Lead and sign off Data Privacy Impact Assessments in line with GAID 2025.
• Provide guidance on lawful bases, consent, privacy notices, data minimisation and retention for children’s health and biometric data.
• Review data processing agreements with research partners and advise on cross‑border transfers.
• Oversee data‑security measures, breach response and data‑subject rights procedures.
• Develop and maintain data‑protection policies, procedures and documentation.
• Prepare periodic data‑protection reports for management.
• Support compliance audit returns and other regulatory requirements.
• Train staff and field teams on data‑protection practices.

Required profile

• Current DPO certification meeting NDPC requirements, with verifiable training credentials.
• Enrolment on the NDPC DPO database or eligibility for enrolment.
• Strong working knowledge of the NDPA 2023 and GAID 2025.
• Practical experience conducting DPIAs and handling sensitive personal data.
• Ability to work independently while maintaining confidentiality.
• No conflict of interest with LunaVax Institute’s processing activities.

What we offer

• Opportunity to shape the data‑protection framework for a pioneering vaccine implementation study.
• Hands‑on experience with children’s health data, biometric verification and digital health systems.
• Collaboration with research, technical, regulatory and global‑health partners.
• Flexible, part‑time role with potential to grow as programmes expand.