Data Protection Officer

About this role

Phillips Outsourcing Limited is seeking a Data Protection Officer in Lagos. The role involves guiding the board and management on data protection obligations, maintaining privacy governance and records, and monitoring compliance through reviews, training, and actions. The officer will manage data protection impact assessments, third‑party arrangements, incident response, and regulatory reporting, acting as a point of contact for NDPC and other stakeholders. The company operates in outsourcing across Nigeria and has a presence in multiple states and expanding to other African nations. The position requires a strong background in privacy, law or related fields, with substantial experience in data protection and governance.

What you would do

• Advise on data protection obligations and privacy-by-design requirements to board, management, employees and process owners.
• Maintain privacy governance framework, records of processing activities, privacy notices, data retention standards and data-subject-rights procedures.
• Monitor compliance through risk-based reviews, evidence checks, staff training, awareness programmes and tracking corrective actions.
• Advise on Data Protection Impact Assessments (DPIAs) for high-risk processing activities and emerging technologies.
• Advise on controller/processor roles, contractual arrangements, third-party due diligence and international data transfers; seek legal advice when needed.
• Coordinate assessment and escalation of data incidents and breaches, including regulatory and data-subject notifications.
• Serve as a primary contact for NDPC, data subjects, clients and other stakeholders on privacy matters.
• Report material privacy risks, incidents, non-compliance and resource limitations to management or governance structures.
• Coordinate statutory/regulatory filings and audits, working with external DPCOs or legal counsel as required.
• Maintain up-to-date knowledge of evolving data protection regulations and uphold confidentiality.

What they are asking for

• Bachelor’s degree in Law, Information Technology, Cybersecurity, Information Management, Business or related field.
• 7–10 years of experience in privacy, legal/compliance, information governance, cybersecurity governance or risk management with substantial data protection responsibilities.
• Professional qualifications such as CIPP/E, CIPM, CIPT, ISO 27701/27001, CISA or a legal qualification; Nigerian data protection training or certification.
• Practical knowledge of the NDPA and guidance from the NDPC.
• Technical knowledge of privacy governance, DPIAs, data-subject rights, incident management, contracts and information security concepts.
• Strong integrity, confidentiality, interpersonal and stakeholder-management skills.
• Ability to advise senior management and stakeholders on data protection obligations and compliance requirements.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.