Description:
Develop and implement data protection and ethics management frameworks, strategies, policies, and governance structures across the organisation.
Oversee annual data privacy compliance audits and ensure timely regulatory filings and reporting obligations.
Develop and maintain privacy notices, cookie notices, and other compliance documentation across products, websites, and data processing touchpoints.
Conduct Data Protection Impact Assessments (DPIAs), privacy risk assessments, and ethics risk assessments, and monitor remediation actions.
Establish and maintain Records of Processing Activities (RoPA), privacy registers, and ethics governance documentation.
Review information security controls, assessments, and testing activities from a privacy and regulatory compliance perspective.
Prepare privacy, ethics, compliance, and assurance reports, dashboards, and metrics for Management, Governance Committees, the Board, and Group stakeholders.
Coordinate ethics and privacy awareness programmes to strengthen regulatory compliance, ethical conduct, and organisational culture.
Manage the whistleblowing programme and support the objective, confidential, and timely investigation and resolution of ethics-related concerns.
Monitor ethics and compliance trends, emerging risks, and case outcomes, and recommend appropriate mitigation measures.
Manage conflict-of-interest disclosure processes and other ethics governance requirements.
Promote a strong speak-up culture, ethical decision-making, accountability, and protection against retaliation.
Review and update ethics, privacy, and compliance policies, standards, and procedures to ensure alignment with regulatory requirements and leading practices.
Embed Privacy by Design and Default principles into products, services, and customer-facing processes.
Develop and maintain policies, procedures, and controls that safeguard customer information throughout its lifecycle.
Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments to identify and mitigate risks to customer data.
Establish and manage processes for handling data subject rights requests, including access, correction, erasure, restriction, and portability.
Serve as a trusted advisor on data privacy regulatory requirements, and industry best practices.
Engage with regulators, business units, vendors, suppliers, and strategic partners on privacy and ethics matters.
Support the integration of privacy and ethics requirements into business initiatives, products, services, and strategic decision-making.
Coordinate regulatory registrations, filings, and compliance submissions with relevant data protection authorities.
Education
First degree in any related field
Data Protection certification (e.g., CIPP, CIPT).
Ethics Officer Certification will be an added advantage
Fluent in English
Experience
6 - 13 years’ experience which includes:
At least 3 Years of experience in data protection, privacy, or related field
Proven experience in leading data protection programs and managing data breaches
Experience working with senior management
Experience working with cross-functional teams and stakeholders
Experience in change management initiatives, and privacy implementation
Familiarity with data protection technical controls
In depth experience and understanding of the Nigerian telecommunications industry and regulatory framework
Effective stakeholder relationship management experience in a telecom’s regulatory environment
Knowledge and experience of best practice ethics and governance frameworks, methodologies and emerging practice, risk assessments in the context of the Nigerian and global telecommunications industry.
Experience in policy governance and development of ethics related programs
Strong and effective business communication (verbal and writing skills)