<p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>About us</strong></span></p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Ranked in 2024 by the Financial Times, Moniepoint is Africa’s fastest-growing fintech, trusted by over <strong>10 million business and individual accounts</strong>, processing <strong>billions of Naira in transactions monthly</strong>. Our mission is to enable financial happiness for every African, everywhere.</span></p> <p class="p2" style="line-height: 1; text-align: justify;"> </p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Job Title:</strong> Data Privacy & Protection Director</span></p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Department:</strong> Compliance</span></p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Reports to:</strong> Chief Compliance Officer</span></p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Location:</strong> Lagos, Nigeria</span></p> <p class="p2" style="line-height: 1; text-align: justify;"> </p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>About this role</strong></span></p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">The Data Privacy & Protection Director provides expertise and support in data privacy and protection matters, ensuring compliance with regulatory requirements such as the Nigerian Data Protection Act (NDPA) 2023 and other relevant data protection laws. The role oversees the entire data protection strategy, driving the implementation of policies and procedures that safeguard personal data and maintain the organization’s reputation for data security. You will also be responsible for managing the organization’s compliance framework, including conducting Data Protection Impact Assessments (DPIAs) and overseeing data breach response efforts.</span></p> <p class="p2" style="line-height: 1; text-align: justify;"> </p> <p class="p1" style="line-height: 1; text-align: justify;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Responsibilities</strong></span></p> <ul class="ul1" style="text-align: justify;"> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Governance Framework:</strong> Implement a data privacy governance framework (including Binding Corporate Rules) to manage data use in compliance with the Nigeria Data Privacy Act (NDPA) 2023.<span class="Apple-converted-space"> </span></span></li> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Policy Development:</strong> Set standards, formulate policies, and establish procedures for the organization to meet NDPA 2023 and other relevant regulations and requirements.<span class="Apple-converted-space"> </span></span></li> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Stakeholder Awareness:</strong> Ensure that employees, third-party processors (TPPs), vendors, and data subjects are fully informed about their data protection rights, obligations, and responsibilities.<span class="Apple-converted-space"> </span></span></li> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Regulatory Liaison:</strong> Serve as the primary point of contact and liaison for the Nigeria Data Privacy Commission (NDPC), other regulators, financial institutions, and customers on data privacy and protection-related matters.<span class="Apple-converted-space"> </span></span></li> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Query & Incident Resolution:</strong> Handle queries, complaints, claims, and notifications from regulators, law enforcement agencies, and data subjects, ensuring prompt feedback and resolutions.<span class="Apple-converted-space"> </span></span></li> <li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Impact Assessments:</strong> Work with product managers, project managers, and other internal stakeholders to conduct data privacy impact assessments (DPIAs) to ensure compliance with NDPA 2023 and extant regulations.<span class="Apple-converted-space"&