Data Protection Officer

About the role

We are looking for a diligent, commercially‑aware Data Protection Officer to join our team in Lekki. The DPO will work on client‑facing privacy compliance projects across the Financial Services, Technology & Media, and Infrastructure sectors, helping organisations meet the Nigeria Data Protection Act and other international standards.

Key responsibilities

• Support clients in complying with the Nigeria Data Protection Act (NDPA) and related regulations.
• Conduct data protection audits, gap assessments and compliance reviews.
• Draft, review and update privacy notices, data processing agreements, policies and governance documentation.
• Assist with Records of Processing Activities (ROPAs), Data Protection Impact Assessments (DPIAs), consent management and data‑governance frameworks.
• Monitor regulatory developments and advise on emerging privacy risks.
• Support incident response, breach management and cross‑border data transfer assessments.
• Deliver privacy awareness sessions and staff training for client organisations.
• Liaise with regulators and conduct vendor compliance reviews where required.

Required profile

• Valid IIM Certified Data Protection Officer (CDPO) certification.
• Strong understanding of data protection and privacy compliance frameworks, including NDPA, NDPC Guidance Notices, GDPR principles and other international standards.
• Proven experience conducting compliance audits, risk assessments and implementing privacy programmes.
• Excellent analytical, drafting and problem‑solving abilities.
• Ability to manage multiple client engagements simultaneously and communicate effectively with legal, compliance and technology teams.

Required skills