Compliance, Data Protection & Certification Manager

About the role

The Compliance, Data Protection & Certification Manager oversees regulatory compliance, data protection and certification requirements so that the organisation keeps its licences, registrations, ISO certifications and regulatory standing. The role also ensures sensitive data is handled securely and builds the assurance documentation needed to win client confidence.

Key responsibilities

• Maintain the regulatory obligations register and compliance calendar for regulators such as the NDPC, CBN, NITDA, NRS, ngCERT, PCI SSC, PenCom, NSITF, ITF and the CAC, and coordinate monthly compliance attestations.
• Manage the data protection programme with the Data Protection Officer, including registration, audit returns, records of processing activities, DPIAs, data transfer records and staff training.
• Manage regulatory incident reporting timelines, test incident response procedures and ensure incidents are escalated and reported on time.
• Coordinate data residency compliance and evidence of compliance with CBN and NITDA requirements.
• Manage the Integrated Management System (ISO 27001, 9001, 22301, 20000-1), including audits, management reviews, corrective actions, surveillance audits and recertification.
• Coordinate SOC 2 Type II, SOC 1 and PCI DSS readiness, maintain the client assurance documentation repository and support client onboarding.
• Manage the policy review cycle, review marketing and tender materials for compliance claims, and prepare quarterly regulatory updates for management and the Board.

Required profile

• At least 7 years' experience in compliance, data protection or management systems within a regulated technology company, fintech or bank.
• Strong knowledge of the NDPA 2023, GAID 2025 and CBN and NITDA frameworks.
• ISO/IEC 27001 Lead Auditor or Lead Implementer certification.
• Experience with at least one of ISO 9001, ISO 22301 or ISO 20000-1, and practical experience on SOC 2 or PCI DSS projects.
• An NDPC-recognised Data Protection Officer credential, CIPP/E or CIPM is an advantage; legal training is an added advantage.

Required skills

• Documentation, analytical, stakeholder management and regulatory reporting skills.
• Knowledge of ISO 27001, ISO 9001, ISO 22301, ISO 20000-1, SOC 2 and PCI DSS.