Data Privacy & Protection Director at Moniepoint Inc.

Data Privacy & Protection Director at Moniepoint Inc.

Moniepoint Inc. is at the forefront of digitising Africa's real economy, empowering businesses with a comprehensive financial ecosystem. We provide vital payment, banking, credit, and business management tools designed to foster success and growth. As we continue to expand our innovative solutions, the integrity and security of our data, particularly personal data, remain paramount. We are seeking a highly skilled and dedicated Data Privacy & Protection Director to join our team, reporting directly to the Chief Compliance Officer.

About This Pivotal Role

The Data Privacy & Protection Director is a critical leadership position, tasked with spearheading Moniepoint's data privacy strategy. You will serve as the principal expert, providing guidance and support on all data privacy and protection matters, ensuring stringent adherence to regulatory mandates such as the Nigerian Data Protection Act (NDPA) 2023 and other relevant data protection legislation. This role demands a holistic approach, encompassing the oversight of our entire data protection framework, driving the implementation of robust policies and procedures, and safeguarding personal data to uphold our unwavering reputation for data security. Furthermore, you will be instrumental in managing our organizational compliance framework, including conducting essential Data Protection Impact Assessments (DPIAs) and leading our data breach response efforts.

Key Responsibilities

• Governance Framework: Design and implement a comprehensive data privacy governance framework, including Binding Corporate Rules, to ensure data usage fully complies with the Nigeria Data Privacy Act (NDPA) 2023.
• Policy Development: Establish and continually refine organizational standards, policies, and procedures to meet the evolving requirements of NDPA 2023 and other pertinent regulations.
• Stakeholder Awareness: Champion data protection awareness, ensuring all employees, third-party processors (TPPs), vendors, and data subjects are fully informed of their rights, obligations, and responsibilities.
• Regulatory Liaison: Act as the primary point of contact and liaison for the Nigeria Data Privacy Commission (NDPC), other regulatory bodies, financial institutions, and customers regarding data privacy and protection matters.
• Query & Incident Resolution: Efficiently manage and resolve queries, complaints, claims, and notifications from regulators, law enforcement agencies, and data subjects, ensuring timely feedback and resolutions.
• Impact Assessments: Collaborate closely with product and project managers, along with other internal stakeholders, to conduct thorough Data Privacy Impact Assessments (DPIAs) to ensure compliance with NDPA 2023 and extant regulations.
• Cross-Functional Alignment: Partner with IT teams to guarantee that all IT systems and procedures align seamlessly with NDPA and other relevant data protection regulations.
• Security Coordination: Work hand-in-hand with the information security team to maintain meticulous records of customer data and processing activities, while sustaining a robust data security management plan, a proactive data breach response plan, and efficient data retention structures.
• Training Strategy: Develop and execute strategies for continuous engagement with key internal and external stakeholders, delivering targeted data privacy training to various business functions, TPPs, and vendors.
• Privacy Audits: Coordinate and conduct routine internal privacy audits, including a comprehensive review of the active privacy governance framework.
• External Auditing: Collaborate closely with the Data Privacy Compliance Organization (DPCO) to facilitate external regulatory audits and provide expert guidance on privacy-related regulatory issues.
• Regulatory Monitoring: Proactively monitor updates to local data privacy laws and regulations, providing timely recommendations to executive leadership when appropriate.

Experience & Background Required

• Educational Background: A Bachelor’s degree in Law, Information Technology, Computer Science, Business Administration, or a related field. A Master’s degree in information security or law is highly preferred.
• Required Experience: A minimum of 5 years of hands-on experience in data protection, compliance, or a related field, coupled with a deep operational understanding of the NDPA and other relevant data protection laws.
• Proven Track Record: Demonstrated experience managing data privacy in complex organizational settings, including successfully executing data protection audits, leading DPIAs, and managing data breach responses.
• Professional Certifications: Relevant professional certifications in data protection/privacy such as CISSP, CIPM, CIPP, CPT, CDPSE, or CDPO are highly preferred.

Skills & Competencies

• Regulatory Insight: Mastery of data privacy legislations, framework applications, and financial sector compliance structures.
• Analytical Skills: Strong capability to deconstruct complex system flows, audit technical processing records, and identify potential vulnerabilities in data privacy management.
• Ethical Integrity: An uncompromising commitment to confidentiality, objectiveness, and ethical compliance standards.
• Effective Communication: Excellent verbal and written communication skills essential for successful collaboration with regulators, external bodies, and internal cross-functional stakeholders.
• Leadership: Strong capability to direct compliance sub-functions, spearhead company-wide training initiatives, and influence technical or product decisions effectively.

What Success Looks Like in This Role

• Perfect Regulatory Standing: Achieve total alignment with the NDPC, resulting in smooth external regulatory audits and zero compliance violations or penalties.
• Flawless Risk Mitigation: Ensure active, seamless execution of DPIAs for all internal structures, products, and tool variations prior to deployment.
• Proactive Incident Management: Guarantee rapid and completely documented closure of queries, compliance gaps, and unexpected breach notification vulnerabilities within strict timelines.
• High Organizational Maturity: Cultivate and maintain an established culture of data safety where employees and third-party partners consistently follow robust data processing protocols.

Why Join Moniepoint?

At Moniepoint, you'll find a dynamic environment that fosters growth and innovation. We offer:

• Competitive compensation, comprehensive benefits, and abundant career growth opportunities.
• A collaborative and supportive work culture dedicated to professional development and continuous learning.

Join us in our mission to empower businesses across Africa and make a significant impact in the FinTech space!

Method of Application:

Interested and qualified? Go to Moniepoint Inc. on job-boards.eu.greenhouse.io to apply