Data Privacy & Protection Director

About the role

The Data Privacy & Protection Director will lead Moni​point’s data privacy strategy, ensuring compliance with the Nigerian Data Protection Act (NDPA) 2023 and other relevant regulations. Reporting to the Chief Compliance Officer, this senior role is based in Lagos and is responsible for safeguarding personal data across the organization.

Key responsibilities

• Implement a data privacy governance framework, including Binding Corporate Rules, to meet NDPA 2023 requirements.
• Develop and maintain policies, standards, and procedures that align with NDPA and other applicable data protection laws.
• Raise awareness among employees, third‑party processors, vendors, and data subjects about data protection rights and obligations.
• Serve as the primary liaison with the Nigeria Data Privacy Commission and other regulators.
• Handle queries, complaints, claims, and notifications from regulators, law‑enforcement agencies, and data subjects.
• Conduct Data Protection Impact Assessments (DPIAs) in collaboration with product and project teams.
• Work closely with IT and information security teams to ensure systems and processes comply with data protection regulations.
• Maintain records of data processing activities, oversee breach response plans, and manage data retention structures.
• Design and deliver targeted data privacy training for internal teams, third‑party processors, and vendors.
• Coordinate routine privacy audits and support external audit activities.

Required profile

• Demonstrated expertise in data privacy and protection matters.
• Experience overseeing a comprehensive data protection strategy.
• Proven ability to manage compliance frameworks, including DPIAs and breach response.
• Strong stakeholder management skills, including interaction with regulators and third‑party processors.

Required skills