Data Protection Officer

Phillips Outsourcing Limited has been in existence for over 16 years. We have a vast experience in the outsourcing business as we currently manage resources for major clients in all sectors of the Nigerian economy. In addition, our prolific manpower cuts across the 36 states in Nigeria. After successfully gaining ground in all the 36 states of the federation, we are gradually spreading our tentacles to other African Nations. We are currently registered to also do business in Ghana. Our framework is developed to fully support the businesses of our clients, ensuring continuous improvement of the outsourced services. This ultimately thrusts our clients to achieve their business objectives.

We are recruiting to fill the position below:

Job Title: Data Protection Officer

Location: Lekki, Lagos
Employment Type: Full-time

Responsibilities

• Advise the Board, management, employees and process owners on data protection obligations and privacy-by-design requirements.
• Maintain the privacy governance framework, records of processing activities, privacy notices, data retention standards and data-subject-rights procedures in collaboration with relevant business owners.
• Monitor compliance through risk-based reviews, evidence checks, staff training, awareness programmes and tracking of corrective actions.
• Advise on and monitor Data Protection Impact Assessments (DPIAs) for high-risk processing activities, new clients, products, ERP changes, biometrics, surveillance, international transfers and emerging technologies.
• Advise on controller and processor roles, contractual arrangements, third-party due diligence, international data transfers and processor oversight, seeking legal advice where necessary.
• Coordinate the assessment and escalation of personal data incidents and breaches, including documentation and advice on regulatory and data-subject notifications.
• Serve as a key contact point for the Nigeria Data Protection Commission (NDPC), data subjects, clients and other authorised stakeholders on privacy-related matters.
• Report material privacy risks, data incidents, systemic non-compliance and resource limitations to the appropriate management or governance structures.
• Coordinate applicable statutory and regulatory filings, audits and engagements, working with accredited external Data Protection Compliance Organisations (DPCOs) or legal counsel where required.
• Maintain professional knowledge of evolving data protection regulations and best practices, uphold confidentiality and ensure independence from conflicting operational responsibilities.

Requirements

• Bachelor's Degree in Law, Information Technology, Cybersecurity, Information Management, Business or a related field with 7 – 10 years of experience in privacy, legal/compliance, information governance, cybersecurity governance or risk management, including substantial responsibility for data protection and privacy management.
• Relevant professional qualifications such as CIPP/E, CIPM, CIPT, ISO 27701/27001, CISA or a legal qualification, alongside Nigerian data protection training or certification.
• Practical knowledge of the Nigeria Data Protection Act (NDPA) and guidance issued by the Nigeria Data Protection Commission (NDPC).
• Strong technical knowledge of privacy governance, records of processing activities, DPIAs, data-subject rights, incident management, processor relationships, contracts, data retention and information security concepts.
• Strong integrity, confidentiality, interpersonal and stakeholder-management skills.
• Ability to advise senior management and business stakeholders on data protection obligations, privacy risks and compliance requirements.